Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is adopting Zero Trust. They have implemented identity and device controls. They are now planning the network layer. They have a mix of on-premises and cloud workloads. What is a key dependency they must address before implementing network segmentation?

   • ADeploy a VPN concentrator for all remote users
   • BMigrate all workloads to a single cloud provider
   • CImplement a data classification scheme for all data stores
   • DEnsure that all workloads have a consistent identity that can be used for policy decisions
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In the Zero Trust adoption model, why is the identity layer typically adopted before the network layer?

   • ABecause network segmentation relies on knowing which users and devices are allowed to communicate
   • BBecause network security is less important than identity security
   • CBecause network layer adoption requires data classification first
   • DBecause identity controls are easier to implement than network controls
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization has implemented MFA and single sign-on for all users. They now want to enforce least-privilege access so that users only have access to the applications and data they need for their role. Which action BEST supports this goal?

   • AImplement role-based access control (RBAC) and regularly review user permissions
   • BDeploy endpoint detection and response (EDR) agents on all user devices
   • CRequire all users to use a VPN when accessing corporate resources
   • DIncrease password complexity requirements for all user accounts
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key requirement for communication in the network layer of Zero Trust?

   • AUse of a single shared password for all systems
   • BPublic exposure of all network segments
   • CEncrypted communication between all components
   • DUnrestricted access to all internal resources
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an example of a secure development practice in the application layer of Zero Trust?

   • AUsing the same password for all application accounts
   • BDeploying applications without any authentication
   • CConducting code reviews and security testing during development
   • DDisabling logging to reduce storage costs
   Reveal Solution Discussion Select an answer first