Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A retail company is implementing Zero Trust. They are concerned that requiring multi-factor authentication (MFA) for every access request will frustrate employees and slow down operations. Which strategy best addresses this user experience challenge while maintaining Zero Trust principles?

   • AImplement MFA but only once per day per user.
   • BRequire MFA only for administrative accounts and not for regular employees.
   • CAllow employees to bypass MFA if they are using a corporate-owned device.
   • DUse risk-based conditional access policies that require MFA only when the access request is deemed risky.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is adopting Zero Trust to support a remote workforce. They want to ensure that employees can access corporate resources from any device, but they are concerned about the security of personal devices. Which approach best aligns with Zero Trust principles?

   • AUse a virtual desktop infrastructure (VDI) to isolate corporate data from personal devices.
   • BAllow access only from company-issued devices.
   • CRequire device compliance checks and enforce access policies based on device posture.
   • DProvide a VPN for remote access and trust it to secure the connection.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is implementing Zero Trust. They want to ensure that even if an attacker gains access to a user's credentials, they cannot easily move through the network. Which principle is most directly applied to achieve this?

   • ALeast privilege access to only necessary resources.
   • BDevice compliance checks before granting access.
   • CAssume breach and design the network to limit lateral movement.
   • DContinuous verification of user identity at every access request.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is considering Zero Trust adoption. They are concerned about the cost and complexity of implementing continuous verification across all users and devices. Which approach best balances security benefits with operational overhead?

   • AOutsource the entire Zero Trust implementation to a managed security service provider.
   • BImplement risk-based conditional access that applies strong verification only to high-risk requests.
   • CApply the same level of verification to all requests to simplify management.
   • DStart with a pilot program for a small group of users before full deployment.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is implementing Zero Trust. They have a complex IT environment with many legacy systems and a high volume of access requests. The security team is concerned about the performance impact of continuous verification on their systems. Which approach best mitigates performance concerns while maintaining Zero Trust principles?

   • APerform full verification for every single request without any caching.
   • BReduce the number of access requests by limiting user access to only a few applications.
   • CUse caching of authentication and authorization decisions for a short time period.
   • DMove all verification to a centralized server to improve efficiency.
   Reveal Solution Discussion Select an answer first