A multinational company must comply with data residency regulations that require customer data to remain in a specific geographic region. They are adopting Zero Trust and have implemented identity and network controls. What is the MOST important data-layer control to address this requirement?

Encrypt all data at rest and in transit using strong encryption algorithms

Require all users to authenticate with MFA before accessing the data

Implement data classification and apply policies that restrict data storage to approved regional locations

Implement network segmentation to isolate the data storage systems

Which of the following is the primary purpose of the device layer in the Zero Trust adoption model?

To enforce compliance and health checks on endpoints before granting access

To classify and encrypt data based on sensitivity

To segment the network into smaller zones to limit lateral movement

To provide single sign-on for all applications

A company is moving a critical application to the cloud. They want to ensure that the application can only be accessed by specific internal services, not from the public internet. What network-layer control should they implement?

Use a public IP address and restrict access with a network security group (NSG)

Place the application in a private subnet and use a private endpoint for internal access

Deploy a web application firewall (WAF) in front of the application

Encrypt all traffic to the application using TLS

A financial institution has a legacy application that cannot be modernized. They want to protect it by limiting lateral movement within their network. The application is accessed by a small team of administrators. What is the most effective network-layer control to implement?

Deploy a next-generation firewall (NGFW) at the network perimeter

Implement micro-segmentation to create a specific security zone for the application and its administrators

Require all administrators to use a jump server to access the application

Move the application to a public cloud provider

What is the primary purpose of micro-segmentation in the network layer of Zero Trust?

To provide a single point of entry for all external traffic

To limit lateral movement by creating isolated security zones

To increase network bandwidth for critical applications

To simplify network management by reducing the number of firewalls

Dell Zero Trust Design

Domain 3Objective 5

Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 1)

Part of the Applying Zero Trust domain, which accounts for 22% of the ZERO-TRUST-DESIGN exam.

30questions here

6free pages

7concepts

22%of the exam

Questions 1–5

1expert · hard
A multinational company must comply with data residency regulations that require customer data to remain in a specific geographic region. They are adopting Zero Trust and have implemented identity and network controls. What is the MOST important data-layer control to address this requirement?
Select an answer first
2foundation · easy
Which of the following is the primary purpose of the device layer in the Zero Trust adoption model?
Select an answer first
3application · medium
A company is moving a critical application to the cloud. They want to ensure that the application can only be accessed by specific internal services, not from the public internet. What network-layer control should they implement?
Select an answer first
4application · medium
A financial institution has a legacy application that cannot be modernized. They want to protect it by limiting lateral movement within their network. The application is accessed by a small team of administrators. What is the most effective network-layer control to implement?
Select an answer first
5foundation · easy
What is the primary purpose of micro-segmentation in the network layer of Zero Trust?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.