Explain the Significance of Zero Trust Pillars ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization is implementing Zero Trust. A nurse needs to access patient records from a shared workstation on the hospital floor. The security team wants to ensure that only the nurse's verified identity can reach the data, and that the shared device does not introduce risk. Which combination of pillar controls should the team prioritize?

   • AApply least-privilege permissions to the nurse's account so they can only view, not edit, patient records
   • BEncrypt the patient records at rest and in transit, relying on the encryption to protect the data from any user
   • CSegment the network so the workstation can only reach the patient-record server, without additional user verification
   • DRequire multi-factor authentication for the nurse and verify the workstation's compliance posture before allowing access
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following best describes the relationship between the pillars in Zero Trust?

   • AThey are independent and can be implemented separately
   • BThey are only relevant for cloud environments
   • CThey are interdependent and reinforce each other
   • DThey are mutually exclusive and only one is used at a time
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Where does the Data pillar protect information?

   • AOnly in the cloud
   • BRegardless of location
   • COnly in on-premises data centers
   • DOnly when at rest
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is implementing micro-segmentation across its data center. The security team has identified that a compromised web server could reach the database server directly. They want to enforce a policy that only the application server (not the web server) can talk to the database. Which control set is most aligned with the Network and Applications & Workloads pillars?

   • ACreate a network policy that allows only the application server to communicate with the database, and ensure the application server runs with least-privilege permissions
   • BMove the database to a different subnet and rely on the subnet's default access controls
   • CEncrypt the database and require a password for all connections
   • DAdd a firewall rule that blocks all traffic to the database except from the web server
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What does the Applications & Workloads pillar use to limit access to applications?

   • ALeast-privilege permissions
   • BNetwork encryption
   • CDevice compliance policies
   • DData loss prevention
   Reveal Solution Discussion Select an answer first