Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is implementing Zero Trust. They have a large number of IoT devices that cannot support agents or modern authentication. The security team wants to include these devices in the Zero Trust architecture. What is the most practical approach?

   • ARequire all IoT devices to be replaced with ones that support modern authentication.
   • BPlace IoT devices on a separate network and treat them as untrusted.
   • CUse a network access control (NAC) solution to enforce policy at the network level.
   • DIgnore IoT devices in the Zero Trust architecture because they are low-risk.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A global company is adopting Zero Trust to improve its security posture. They want to gain better visibility into who is accessing what, from where, and on which device. Which Zero Trust capability most directly provides this visibility?

   • ACentralized logging and monitoring of all access requests and decisions.
   • BDeploying a VPN for remote access.
   • CImplementing multi-factor authentication for all users.
   • DUsing a single vendor for all security products.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is a key component of a Zero Trust architecture?

   • AIdentity
   • BPerimeter firewall
   • CDMZ
   • DVPN concentrator
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company has a traditional perimeter-based security model. They are planning to adopt Zero Trust. The security team is concerned that moving to Zero Trust will require significant changes to their network infrastructure. Which approach minimizes infrastructure changes while still implementing Zero Trust principles?

   • AReplace all network firewalls with next-generation firewalls.
   • BRedesign the entire network with micro-segmentation.
   • CMove all applications to the cloud to avoid network changes.
   • DImplement Zero Trust at the application layer using identity-based access controls.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A manufacturing company is implementing Zero Trust. They have many legacy industrial control systems (ICS) that cannot support modern authentication protocols like SAML or OAuth. The security team wants to include these systems in the Zero Trust architecture. What is the most appropriate approach?

   • AAllow legacy systems to operate without authentication but monitor them closely.
   • BReplace all legacy systems with modern equivalents that support current protocols.
   • CPlace a gateway or proxy in front of the legacy systems to enforce authentication and policy.
   • DExclude legacy systems from the Zero Trust scope because they are on an isolated network.
   Reveal Solution Discussion Select an answer first