Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common challenge when integrating Zero Trust with existing systems?

   • ALegacy systems are always more secure than modern systems.
   • BLegacy systems require no changes to work with Zero Trust.
   • CLegacy systems automatically comply with Zero Trust principles.
   • DLegacy systems may not support modern identity and access controls.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company currently uses a traditional perimeter-based security model. They want to adopt Zero Trust. Which statement best describes the fundamental change they need to make?

   • AIncrease the number of firewalls and intrusion prevention systems.
   • BReplace all passwords with biometric authentication.
   • CMove all applications to the cloud to eliminate the need for a perimeter.
   • DShift from trusting users based on network location to verifying every access request regardless of origin.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is adopting Zero Trust. They want to reduce the risk of data exfiltration by preventing users from downloading sensitive files to unmanaged devices. Which Zero Trust component is most directly involved in this control?

   • ANetwork firewalls to block external connections.
   • BEndpoint detection and response (EDR) on managed devices.
   • CData loss prevention (DLP) policies integrated with access controls.
   • DIdentity and access management (IAM) to authenticate users.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which scenario is a typical use case for Zero Trust?

   • AA legacy mainframe with no network connectivity
   • BA fully air-gapped network with no external access
   • CRemote work
   • DA single-user home network
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is moving its applications to the cloud and wants to implement Zero Trust. They are concerned about the security of data stored in the cloud. Which approach best aligns with Zero Trust principles for protecting cloud data?

   • ARely on the cloud provider's default security settings.
   • BMove all data back to on-premises to maintain control.
   • CUse a cloud access security broker (CASB) to monitor all traffic.
   • DEncrypt data and control access with fine-grained identity-based policies.
   Reveal Solution Discussion Select an answer first