A company has a legacy on-premises application that is critical to operations but cannot be modified. They want to apply Zero Trust application-layer controls. They have already implemented identity and device controls. What is the MOST effective way to secure this application?

Place the application behind a reverse proxy that enforces authentication and session policies

Require all users to connect via a VPN to access the application

Deploy an endpoint detection and response (EDR) agent on the application server

Move the application to a containerized environment

A company is implementing micro-segmentation for its data center. They have a three-tier application (web, app, database). The web tier is internet-facing, the app tier processes business logic, and the database tier stores sensitive customer data. Which segmentation policy BEST aligns with Zero Trust principles?

Allow all tiers to communicate with each other, but encrypt all traffic between them

Place all three tiers in the same security zone to simplify management

Allow the web tier to communicate only with the app tier, and the app tier only with the database tier, on specific ports

Allow the database tier to be accessed directly by the web tier for faster performance

A company stores customer data in a cloud database. They want to ensure that only specific applications can access the data, not individual users directly. What data-layer control is MOST appropriate?

Grant all users direct access to the database with their user accounts

Encrypt the database and provide the encryption keys to all users

Place the database on a separate network segment

Use service-to-service authentication and restrict database access to the application's identity

A company has a bring-your-own-device (BYOD) policy. They want to ensure that only devices with a current OS version and a screen lock can access corporate email. What is the BEST way to enforce this?

Create a device compliance policy and integrate it with the identity provider for conditional access

Block all BYOD devices from accessing corporate email

Require users to use a VPN to access corporate email

Ask users to manually confirm their device meets the requirements

A company is adopting Zero Trust. They have a small IT team and limited budget. They need to prioritize their efforts to get the most security value quickly. Which approach BEST balances effort and impact?

Start with the device layer, implementing strict compliance checks on all endpoints

Start with the data layer, classifying and encrypting all data

Start with the identity layer, implementing MFA and conditional access policies

Start with the network layer, implementing micro-segmentation across the entire network

Dell Zero Trust Design

Domain 3Objective 5

Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 4)

Part of the Applying Zero Trust domain, which accounts for 22% of the ZERO-TRUST-DESIGN exam.

30questions here

6free pages

7concepts

22%of the exam

Questions 16–20

16expert · hard
A company has a legacy on-premises application that is critical to operations but cannot be modified. They want to apply Zero Trust application-layer controls. They have already implemented identity and device controls. What is the MOST effective way to secure this application?
Select an answer first
17expert · hard
A company is implementing micro-segmentation for its data center. They have a three-tier application (web, app, database). The web tier is internet-facing, the app tier processes business logic, and the database tier stores sensitive customer data. Which segmentation policy BEST aligns with Zero Trust principles?
Select an answer first
18application · medium
A company stores customer data in a cloud database. They want to ensure that only specific applications can access the data, not individual users directly. What data-layer control is MOST appropriate?
Select an answer first
19application · medium
A company has a bring-your-own-device (BYOD) policy. They want to ensure that only devices with a current OS version and a screen lock can access corporate email. What is the BEST way to enforce this?
Select an answer first
20expert · hard
A company is adopting Zero Trust. They have a small IT team and limited budget. They need to prioritize their efforts to get the most security value quickly. Which approach BEST balances effort and impact?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.