A large enterprise is planning a multi-year Zero Trust adoption. They have a mature identity program (MFA, SSO, RBAC) but their network is flat and their device management is inconsistent. They want to reduce the risk of lateral movement from a compromised endpoint. Given the dependencies between layers, what should be their NEXT priority?

Focus on application-layer controls, such as a web application firewall (WAF)

Implement network segmentation and micro-segmentation to limit the blast radius

Standardize on a single device management platform for all endpoints

Deploy a comprehensive data classification and encryption program

A company is deploying a new internal application. They want to ensure that only authorized users can access it and that their access is logged. What is the MOST important application-layer control to implement?

Implement application-level authentication and authorization, and enable detailed audit logging

Require users to connect via a VPN to access the application

Deploy a network intrusion detection system (IDS) to monitor traffic

Encrypt the application's database at rest

A software company is developing a new customer-facing web application. They want to apply Zero Trust principles to the application layer from the start. Which practice is MOST aligned with this goal?

Encrypt all data transmitted between the application and its users using TLS

Require all users to authenticate with MFA before accessing the application

Deploy the application on a separate network segment from the rest of the corporate network

Integrate secure development practices, such as code reviews and vulnerability scanning, into the CI/CD pipeline

In the application layer of Zero Trust, what is the purpose of workload protection?

To reduce the number of applications in the environment

To provide a user-friendly interface for applications

To protect applications from vulnerabilities and attacks

To ensure applications are accessible from any device

In the data layer of Zero Trust, what is the purpose of data classification?

To make data accessible to all users

To delete data that is no longer needed

To encrypt all data with the same key

To label data based on its sensitivity and importance

Dell Zero Trust Design

Domain 3Objective 5

Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 5)

Part of the Applying Zero Trust domain, which accounts for 22% of the ZERO-TRUST-DESIGN exam.

30questions here

6free pages

7concepts

22%of the exam

Questions 21–25

21expert · hard
A large enterprise is planning a multi-year Zero Trust adoption. They have a mature identity program (MFA, SSO, RBAC) but their network is flat and their device management is inconsistent. They want to reduce the risk of lateral movement from a compromised endpoint. Given the dependencies between layers, what should be their NEXT priority?
Select an answer first
22application · medium
A company is deploying a new internal application. They want to ensure that only authorized users can access it and that their access is logged. What is the MOST important application-layer control to implement?
Select an answer first
23application · medium
A software company is developing a new customer-facing web application. They want to apply Zero Trust principles to the application layer from the start. Which practice is MOST aligned with this goal?
Select an answer first
24foundation · easy
In the application layer of Zero Trust, what is the purpose of workload protection?
Select an answer first
25foundation · easy
In the data layer of Zero Trust, what is the purpose of data classification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.