Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A bank is subject to a new regulation that requires strict access controls and audit trails for all customer data. The bank's current security model relies on a VPN for remote access and trusts internal users. The compliance officer wants to adopt Zero Trust, but the IT team is concerned about the cost and complexity. What is the most compelling argument for Zero Trust in this context?

   • AZero Trust is the only way to comply with the regulation, so the IT team has no choice.
   • BZero Trust will make the network faster and more reliable for remote users.
   • CZero Trust provides the granular access controls and continuous verification needed to meet the regulation, and the cost of non-compliance (fines and reputational damage) likely exceeds the implementation cost.
   • DZero Trust will reduce the IT budget by eliminating the need for VPNs and firewalls.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company has a mix of on-premises and cloud applications. Users access these applications from various devices and locations. The security team wants to implement a model that verifies every access request, regardless of where it originates. Which principle does this reflect?

   • ATrust but verify
   • BDefense in depth
   • CNever trust, always verify
   • DPerimeter security
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   When communicating the need for Zero Trust to business stakeholders, which message is most likely to gain their buy-in?

   • AZero Trust will eliminate the need for security audits.
   • BZero Trust will reduce the number of security alerts.
   • CZero Trust will make the network faster.
   • DZero Trust will help protect the company's reputation and customer trust.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In a cost-benefit analysis of Zero Trust, which benefit is most directly tied to reducing the impact of a security breach?

   • AIncreasing the number of security tools
   • BLowering the cost of security software licenses
   • CEliminating the need for security training
   • DDecreasing the time to detect and contain a breach
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has expanded its workforce to include remote employees who use personal devices to access cloud applications. The security team notices that the traditional perimeter firewall is no longer effective because traffic bypasses it. Which approach best addresses this shift?

   • AStrengthen the perimeter firewall by adding more rules to block unauthorized traffic.
   • BDisable remote access until a new firewall can be deployed.
   • CImplement a Zero Trust model that verifies every access request regardless of location or device.
   • DRequire all remote employees to use VPN to route traffic through the corporate firewall.
   Reveal Solution Discussion Select an answer first