Explain the Significance of Zero Trust Pillars ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which principle is central to the Identity pillar in Zero Trust?

   • ADevice compliance
   • BLeast privilege
   • CNetwork segmentation
   • DData classification
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large enterprise is designing a Zero Trust architecture. They have a legacy application that cannot support modern authentication protocols (e.g., SAML, OIDC). The application stores sensitive data and must be accessed by remote users. The security team wants to enforce Zero Trust principles without rewriting the application. Which approach best balances security and feasibility?

   • AExpose the application directly to the internet and rely on the application's built-in password authentication
   • BMove the application to a separate VLAN and require a VPN for all remote access
   • CPlace the application behind a Zero Trust proxy that enforces MFA and device compliance, and restrict the application's network access to only the proxy
   • DEncrypt the data the application stores and rely on encryption to protect it
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company allows employees to use personal smartphones to access corporate email. The security team wants to enforce Zero Trust but is concerned about user privacy. They want to ensure the device is compliant without overly intrusive controls. Which approach best balances security and privacy?

   • ARequire full device enrollment in MDM, giving the company visibility into all apps and data on the phone
   • BUse a mobile application management (MAM) solution that enforces compliance on the corporate app only, without full device management
   • CAllow access with just a password, since the user owns the device
   • DBlock all access from personal smartphones and require company-issued devices
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a method used by the Data pillar to safeguard information?

   • ADevice health checks
   • BEncryption
   • CMulti-factor authentication
   • DMicro-segmentation
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company stores sensitive financial data in a cloud database. The security team wants to ensure that only authorized users can read the data, and that the data is protected even if the database is compromised. Which approach aligns with the Data pillar?

   • AMove the database to an on-premises server and rely on the physical security of the data center
   • BBack up the database daily and store backups in a separate location
   • CUse a strong database password and limit access to the database to a single admin account
   • DClassify the data as sensitive, encrypt it at rest and in transit, and use attribute-based access control (ABAC) to grant access based on user attributes
   Reveal Solution Discussion Select an answer first