Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is beginning its Zero Trust adoption. The security team wants to start with a layer that will have the broadest immediate impact on reducing credential-based attacks, but they are also concerned about user productivity and want to avoid locking users out of systems. Which layer should they adopt FIRST?

   • AData layer, classifying and encrypting all sensitive data at rest
   • BDevice layer, enforcing strict compliance checks on all endpoints before granting access
   • CIdentity layer, implementing strong authentication and least-privilege access
   • DNetwork layer, implementing micro-segmentation to limit lateral movement
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare organization needs to protect patient records (PHI) stored in a cloud file share. They have already implemented identity and device controls. What is the MOST important data-layer control to implement next?

   • ARequire all users to use a specific VPN to access the file share
   • BImplement a data loss prevention (DLP) policy that blocks all external sharing
   • CClassify the data and apply encryption at rest and in transit
   • DMove the data to an on-premises data center to maintain physical control
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In the Zero Trust adoption model, which layer is typically addressed first to establish a strong foundation for subsequent layers?

   • AApplication
   • BIdentity
   • CNetwork
   • DData
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company allows employees to use personal laptops for remote work. The security team wants to ensure that only compliant devices can access corporate applications. They have implemented a device compliance policy that checks for OS patches and antivirus definitions. What is the NEXT step to enforce this policy?

   • ASend a notification to the user that their device is non-compliant
   • BIntegrate the compliance check with the identity provider to block non-compliant devices at authentication
   • CDisconnect the user's VPN session if the device is non-compliant
   • DRequire the user to re-authenticate with MFA every time they access a resource
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In the identity layer of Zero Trust, what is the primary purpose of implementing least-privilege access controls?

   • ATo ensure all users have the same level of access for consistency
   • BTo grant temporary access to all resources during a security incident
   • CTo grant users only the permissions necessary to perform their job functions
   • DTo provide access based on the user's role without any additional verification
   Reveal Solution Discussion Select an answer first