Discuss Need and Business Case for Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A government contractor is required to comply with CMMC (Cybersecurity Maturity Model Certification) and also wants to enable employees to work from home. The current security model uses a VPN and trusts the internal network. Which combination of factors most strongly justifies moving to Zero Trust?

   • AThe requirement to use a specific security vendor.
   • BThe need to meet CMMC access-control requirements and the loss of a trusted perimeter due to remote work.
   • CThe need to increase network bandwidth for remote workers.
   • DThe desire to reduce VPN costs and improve employee satisfaction.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In a Zero Trust architecture, what does 'always verify' mean in practice?

   • AAll network traffic is inspected by a firewall before reaching the resource.
   • BUsers must re-authenticate every time they access a resource.
   • CEvery access request is authenticated, authorized, and encrypted before being granted.
   • DUsers must use multi-factor authentication for all applications.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which business driver is most directly addressed by a Zero Trust approach?

   • AReducing the cost of on-premises hardware
   • BSupporting a remote workforce accessing resources from various locations
   • CIncreasing the speed of the internal network
   • DSimplifying the user login experience
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   When building a business case for Zero Trust, which factor should be considered as a cost of implementation?

   • AThe improved compliance with regulations
   • BThe investment in identity and access management solutions
   • CThe potential reduction in breach-related fines
   • DThe increased trust from customers
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A financial services firm is considering a Zero Trust implementation. The CISO wants to justify the upfront investment to the board. Which argument best supports the business case?

   • AZero Trust will guarantee compliance with all industry regulations.
   • BZero Trust will eliminate the need for any other security controls, reducing overall security costs.
   • CZero Trust will reduce the potential financial impact of a data breach by limiting lateral movement.
   • DZero Trust will make the network faster by removing firewalls.
   Reveal Solution Discussion Select an answer first