Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A retail company is migrating its inventory management system to a public cloud and enabling employees to access it from anywhere. The security team is concerned about the increased attack surface. Which driver most strongly necessitates a Zero Trust approach in this scenario?

   • AThe company wants to reduce its IT budget by eliminating the need for VPNs.
   • BThe migration to cloud and remote access removes the traditional network perimeter that previously provided implicit trust.
   • CThe company needs to comply with a new data protection regulation.
   • DThe company wants to improve employee productivity by simplifying access.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is introducing Zero Trust. The HR department is concerned that continuous verification will slow down employee access to applications. Which communication approach best addresses this concern?

   • AAsk HR to provide a list of applications that should be exempt from verification.
   • BTell HR that security is more important than convenience and they will get used to it.
   • CExplain that Zero Trust can use modern authentication methods like single sign-on (SSO) to minimize friction while still verifying access.
   • DPromise that there will be no change in the user experience.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company in the healthcare sector is subject to HIPAA and wants to implement Zero Trust. The compliance officer is concerned about the cost. Which benefit of Zero Trust is most relevant to justify the investment?

   • AGuaranteed protection of all patient data.
   • BIncreased network speed for employees.
   • CElimination of the need for security audits.
   • DReduced risk of non-compliance penalties and improved audit readiness.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is deciding between investing in Zero Trust or purchasing cyber insurance. The CFO argues that insurance is cheaper and provides financial protection. Which response best articulates why Zero Trust is still necessary?

   • ACyber insurance does not reduce the likelihood or impact of a breach; Zero Trust actively reduces both, and insurance premiums may increase after a breach.
   • BZero Trust is cheaper than cyber insurance in the long run.
   • CCyber insurance is not required by any regulation, so it is optional.
   • DZero Trust will eliminate the need for cyber insurance.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a key business driver for adopting Zero Trust?

   • AThe need to support digital transformation initiatives that rely on cloud services
   • BThe requirement to reduce the number of security vendors
   • CThe desire to eliminate the need for security monitoring
   • DThe need to move all workloads to a single cloud provider
   Reveal Solution Discussion Select an answer first