Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does Zero Trust differ from traditional perimeter-based security?

   • AZero Trust assumes no implicit trust, while traditional security trusts users inside the network.
   • BZero Trust only applies to cloud environments, while traditional security applies to on-premises networks.
   • CZero Trust relies on a strong firewall at the network edge, while traditional security uses microsegmentation.
   • DZero Trust trusts internal users by default, while traditional security verifies everyone.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a Zero Trust model, what is the default trust level for any access request?

   • ATrusted if the request comes from a known IP address.
   • BTrusted if the user has valid credentials.
   • CNo trust is assumed until the request is verified.
   • DTrusted if the request originates from inside the corporate network.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is migrating its on-premises data center to a hybrid cloud model. The security team wants to implement a Zero Trust architecture. Currently, employees working from the office get full network access once they connect to the corporate LAN, while remote employees must use a VPN. Which change best aligns with Zero Trust principles?

   • AKeep the current setup but add multi-factor authentication for remote VPN users only.
   • BMove all applications to the public cloud and rely on the cloud provider's security perimeter.
   • CRequire all users, regardless of location, to authenticate and be continuously verified before accessing any resource.
   • DIncrease the strength of the corporate firewall and add more intrusion detection systems.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is designing a Zero Trust architecture. They want to ensure that even if a user's credentials are compromised, the attacker cannot access sensitive data. Which combination of components is most effective?

   • AData encryption and a VPN for remote access.
   • BNetwork segmentation and a strong firewall.
   • CMulti-factor authentication (MFA) and least privilege access policies.
   • DEndpoint detection and response (EDR) and antivirus software.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best defines the Zero Trust security model?

   • AA model that grants full access to authenticated users and restricts only unauthenticated traffic.
   • BA model that assumes no implicit trust and verifies every access request regardless of its origin.
   • CA model that trusts users and devices inside the corporate network but verifies all external access requests.
   • DA model that relies on a demilitarized zone (DMZ) to protect internal resources from external threats.
   Reveal Solution Discussion Select an answer first