Explain Zero Trust Adoption Layer ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a key component of identity verification in the identity layer of Zero Trust?

   • AData encryption at rest
   • BNetwork segmentation
   • CEndpoint compliance checks
   • DMulti-factor authentication (MFA)
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is a key component of protecting data in the data layer of Zero Trust?

   • AGranting all users full access to data
   • BDisabling audit logs for data access
   • CEncrypting data at rest and in transit
   • DStoring all data in a single location
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   In the device layer of Zero Trust, what is the purpose of continuous monitoring of endpoints?

   • ATo replace the need for user authentication
   • BTo detect and respond to security threats in real time
   • CTo automatically grant access to all resources
   • DTo reduce the need for device compliance checks
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is an example of enforcing device compliance in the device layer of Zero Trust?

   • ARequiring devices to have the latest security patches before accessing resources
   • BEncrypting all data in transit
   • CImplementing single sign-on for all applications
   • DSegmenting the network into different zones
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company has implemented device compliance policies that require all managed devices to have the latest OS patches. However, a group of executives uses unmanaged personal iPads to access email. The security team wants to enforce Zero Trust without blocking executive access entirely. What is the BEST approach?

   • AAllow access from unmanaged devices but restrict access to sensitive data and require MFA and app-level protection
   • BBlock all access from unmanaged devices until they are enrolled in the device management platform
   • CRequire the executives to use a separate, managed device for all corporate email
   • DProvide the executives with a VPN client to install on their personal iPads
   Reveal Solution Discussion Select an answer first