Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Why is traditional perimeter security considered insufficient in modern IT environments?

   • AIt relies on implicit trust for users and devices inside the network.
   • BIt cannot protect against insider threats.
   • CIt does not support cloud-based applications.
   • DIt is too expensive to maintain.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is experiencing an increase in sophisticated phishing attacks that bypass email filters. The security team wants to adopt Zero Trust, but the CEO is skeptical because the company has never had a major breach. Which argument best justifies the need for Zero Trust?

   • AZero Trust will make the company immune to phishing attacks.
   • BThe evolving threat landscape means that a breach is a matter of 'when' not 'if', and Zero Trust reduces the impact of a successful attack.
   • CZero Trust will reduce the IT budget by eliminating the need for email filtering.
   • DZero Trust is required by a new industry regulation.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a traditional network with a strong firewall and internal segmentation. An attacker compromises a low-privilege user account and is able to move laterally to access sensitive financial data. Which limitation of the perimeter model does this illustrate?

   • AOnce inside the network, users and devices are implicitly trusted, allowing lateral movement.
   • BThe company lacks an intrusion detection system.
   • CThe firewall is not configured to block all malicious traffic.
   • DThe attacker used a zero-day exploit that bypassed the firewall.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is considering a Zero Trust implementation. The CFO asks for a cost-benefit analysis. Which factor should be included as a benefit of Zero Trust?

   • AReduced financial impact of a data breach by containing the blast radius.
   • BGuaranteed prevention of all cyberattacks.
   • CImmediate return on investment within the first month.
   • DElimination of all security-related costs.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which scenario best illustrates a limitation of the traditional perimeter model?

   • AA firewall blocking malicious traffic from the internet
   • BA server in the data center communicating with another server
   • CAn employee using a personal device to access cloud services from a coffee shop
   • DA user accessing a corporate application from the office network
   Reveal Solution Discussion Select an answer first