Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is implementing Zero Trust. An employee connects from a coffee shop using a personal laptop to access a corporate application. According to Zero Trust principles, what should happen?

   • AAccess should be granted because the employee has valid credentials.
   • BThe access request should be verified based on user identity, device health, and other context before granting access.
   • CAccess should be denied because the employee is not on the corporate network.
   • DAccess should be granted because the employee is using a corporate VPN.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company's CISO wants to implement Zero Trust, but the network team is resistant because they believe the current perimeter firewall is sufficient. The CISO needs to gain their buy-in. Which argument is most likely to convince the network team?

   • AOffer to increase the network team's budget if they support Zero Trust.
   • BDemonstrate how a compromised internal device can move laterally to access sensitive systems, bypassing the firewall.
   • CExplain that Zero Trust will make their jobs easier by automating firewall rule changes.
   • DState that Zero Trust is a mandate from the board and cannot be questioned.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A multinational corporation is evaluating Zero Trust to meet GDPR data protection requirements. The legal team insists on data residency, while the security team wants to centralize security monitoring. Which approach best balances these competing needs?

   • ACentralize all security monitoring in a single region, even if it means transferring personal data outside the EU.
   • BEnforce data residency by storing all data on-premises, and use a separate monitoring system for each region.
   • CUse a Zero Trust architecture that ignores data residency and focuses only on identity verification.
   • DDeploy Zero Trust controls that enforce data residency by restricting access to data based on geographic location, while centralizing monitoring through a single dashboard that does not store data outside the required region.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company in the European Union must comply with GDPR, which requires protecting personal data. The company wants to adopt Zero Trust to help meet these requirements. Which Zero Trust capability most directly supports GDPR compliance?

   • AGranular access controls that limit who can access personal data.
   • BNetwork segmentation to isolate different departments.
   • CEncryption of data in transit only.
   • DRegular penetration testing of the network.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which approach is most effective for aligning technical stakeholders with a Zero Trust initiative?

   • AFocusing on the latest security trends
   • BExplaining that Zero Trust is a simple configuration change
   • CDemonstrating how Zero Trust reduces the attack surface and improves visibility
   • DEmphasizing the cost savings from reduced hardware
   Reveal Solution Discussion Select an answer first