A company allows employees to bring their own devices (BYOD) to access corporate email and documents. The security team wants to ensure that only compliant devices can access corporate resources, and that the user's identity is verified. Which control set best meets this requirement?

Block all BYOD access and require employees to use only company-issued laptops

Use a VPN for all BYOD traffic and rely on the VPN to secure the connection

Require a strong password on the device and change it every 90 days

Enroll devices in mobile device management (MDM), check compliance before access, and require MFA for the user

A company runs a customer-facing web application. The security team wants to protect the application from credential stuffing attacks and ensure that each user can only access their own data. Which control set aligns with the Applications & Workloads pillar?

Encrypt all data in the application's database and use a strong database password

Implement MFA and rate limiting on the login endpoint, and enforce per-user data isolation in the application logic

Segment the application's network so it can only talk to the database

Use a web application firewall (WAF) to block common attack patterns

An organization is implementing Zero Trust and wants to ensure that a contractor can only access the specific project files they are assigned to, and only from a company-approved laptop. Which set of controls should be applied?

Put the project files on a separate network segment and give the contractor VPN access

Assign the contractor a least-privilege role that grants access only to the specific project files, and require the laptop to pass a compliance check

Allow the contractor to use any device as long as they have the correct password

Give the contractor a generic user account with access to all project files, and require MFA

A software company runs a web application that handles customer orders. The security team wants to protect the application from compromised credentials and limit what the application can do if it is breached. Which approach aligns with the Applications & Workloads pillar?

Encrypt all data the application processes and store it in a secure vault

Place the application behind a web application firewall (WAF) and monitor traffic for anomalies

Require MFA for all users of the application and run the application with the least privileges needed to function

Segment the application's network so it can only talk to the database, with no other restrictions

Dell Zero Trust Design

Domain 2Objective 3

Explain the Significance of Zero Trust Pillars ZERO-TRUST-DESIGN Practice Questions (Page 1)

Part of the Zero Trust Tenets and Pillars domain, which accounts for 14% of the ZERO-TRUST-DESIGN exam.

31questions here

7free pages

7concepts

14%of the exam

Questions 1–5

1foundation · easy
Which of the following is a key aspect of the Applications & Workloads pillar?
Select an answer first
2application · medium
A company allows employees to bring their own devices (BYOD) to access corporate email and documents. The security team wants to ensure that only compliant devices can access corporate resources, and that the user's identity is verified. Which control set best meets this requirement?
Select an answer first
3application · medium
A company runs a customer-facing web application. The security team wants to protect the application from credential stuffing attacks and ensure that each user can only access their own data. Which control set aligns with the Applications & Workloads pillar?
Select an answer first
4application · medium
An organization is implementing Zero Trust and wants to ensure that a contractor can only access the specific project files they are assigned to, and only from a company-approved laptop. Which set of controls should be applied?
Select an answer first
5application · medium
A software company runs a web application that handles customer orders. The security team wants to protect the application from compromised credentials and limit what the application can do if it is breached. Which approach aligns with the Applications & Workloads pillar?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.