Explain the Significance of Zero Trust Pillars ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the collective role of the five Zero Trust pillars in an architecture?

   • ATo enforce security policies based on the traditional network perimeter
   • BTo focus solely on protecting data at rest in on-premises storage
   • CTo replace the need for identity verification with network-based controls
   • DTo provide a layered defense that verifies every access request and protects resources across all domains
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is implementing Zero Trust and wants to ensure that a compromised IoT device on the factory floor cannot reach the corporate HR system. Which control is most directly aligned with the Network pillar?

   • AEncrypt all traffic between the IoT device and the HR system
   • BEnforce device compliance checks on the IoT device before it connects
   • CSegment the factory network from the corporate network and apply micro-segmentation to restrict traffic between IoT devices and HR systems
   • DRequire MFA for all users of the HR system
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is implementing Zero Trust and wants to ensure that a user's access to a financial application is revoked immediately when they leave the company. Which control is most directly aligned with the Identity pillar?

   • ABlock the user's IP address at the network firewall
   • BEncrypt the application's data and require a new password for all users
   • CChange the application's database password and restart the application server
   • DIntegrate the application with the identity provider (IdP) and disable the user's account in the IdP upon termination
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A global company must comply with data residency regulations that require customer data to stay within a specific country. They are implementing Zero Trust and want to ensure that data is protected and access is controlled. Which approach best aligns with the Data pillar while meeting the residency requirement?

   • AClassify customer data, store it in a cloud region within the required country, encrypt it, and apply access policies based on user identity
   • BEncrypt all customer data and store it in any cloud region, relying on encryption to protect it
   • CStore all customer data on-premises in the required country and block all remote access to it
   • DUse a VPN to connect all users to the data center and rely on the VPN for access control
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In the Devices pillar, what is required before granting access to a device?

   • AThe device must have a static IP address
   • BThe device must pass compliance and health checks
   • CThe device must be on the corporate network
   • DThe device must be owned by the organization
   Reveal Solution Discussion Select an answer first