A financial services firm is adopting Zero Trust. They want to ensure that a compromised user account cannot be used to access sensitive customer data beyond what the legitimate user needs. Which control directly addresses this requirement?

Encrypting all data at rest and in transit.

Implementing least privilege access so each user only has permissions required for their role.

Deploying a next-generation firewall to segment the network into different zones.

Requiring users to change their passwords every 60 days.

Which of the following is a core principle of Zero Trust?

Implicit trust for internal users

A company is designing a Zero Trust architecture. They want to ensure that only authorized users can access specific applications, and that the applications themselves are protected from unauthorized access. Which Zero Trust component is primarily responsible for enforcing access policies at the application layer?

Data encryption at rest and in transit.

Endpoint detection and response (EDR) on user devices.

Identity and access management (IAM) with policy enforcement points.

Network segmentation with firewalls.

A company is moving to a Zero Trust model. They want to ensure that access decisions are based on multiple factors, not just the user's network location. Which approach best exemplifies this?

Use a single sign-on (SSO) system to simplify access.

Evaluate user identity, device posture, and data sensitivity for every access request.

Require a VPN connection before allowing access to any resource.

Grant access based on the user's IP address being within the corporate network.

Dell Zero Trust Design

Domain 1Objective 1

Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Part of the Introduction to Zero Trust domain, which accounts for 8% of the ZERO-TRUST-DESIGN exam.

32questions here

7free pages

7concepts

8%of the exam

Questions 21–25

21application · medium
A financial services firm is adopting Zero Trust. They want to ensure that a compromised user account cannot be used to access sensitive customer data beyond what the legitimate user needs. Which control directly addresses this requirement?
Select an answer first
22foundation · easy
What is a common challenge when implementing Zero Trust?
Select an answer first
23foundation · easy
Which of the following is a core principle of Zero Trust?
Select an answer first
24application · medium
A company is designing a Zero Trust architecture. They want to ensure that only authorized users can access specific applications, and that the applications themselves are protected from unauthorized access. Which Zero Trust component is primarily responsible for enforcing access policies at the application layer?
Select an answer first
25application · medium
A company is moving to a Zero Trust model. They want to ensure that access decisions are based on multiple factors, not just the user's network location. Which approach best exemplifies this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ZERO-TRUST-DESIGN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “ZERO-TRUST-DESIGN” is a trademark of its owner, used for identification only.

Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

A financial services firm is adopting Zero Trust. They want to ensure that a compromised user account cannot be used to access sensitive customer data beyond what the legitimate user needs. Which control directly addresses this requirement?

What is a common challenge when implementing Zero Trust?

Which of the following is a core principle of Zero Trust?

A company is moving to a Zero Trust model. They want to ensure that access decisions are based on multiple factors, not just the user's network location. Which approach best exemplifies this?

Keep studying — Introduction to Zero Trust