Explain Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A large enterprise is implementing Zero Trust. They have a mix of modern cloud applications and legacy on-premises systems. The security team wants to enforce consistent access policies across all resources. However, the legacy systems do not support modern identity protocols. What is the most effective way to achieve consistent policy enforcement?

   • ACreate separate policies for cloud and legacy systems to avoid integration issues.
   • BDeploy a policy enforcement point (PEP) that can translate modern authentication into legacy protocols.
   • CMigrate all legacy systems to the cloud to simplify policy management.
   • DUse a single sign-on (SSO) solution for all applications.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is implementing Zero Trust. They want to ensure that a user's access rights are automatically adjusted when their role changes. Which principle is most directly applied?

   • ADevice compliance, ensuring the user's device meets security standards.
   • BLeast privilege access, granting only the permissions required for the current role.
   • CAssuming breach, designing the network to contain potential attacks.
   • DContinuous verification, re-authenticating the user at each access request.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A healthcare organization is moving to a Zero Trust model. They want to reduce the risk of lateral movement if a workstation is compromised. Which Zero Trust benefit is most directly achieved by implementing micro-segmentation?

   • AEnhanced visibility by logging all network traffic.
   • BReduced attack surface by limiting the ability of an attacker to move laterally.
   • CImproved user experience by simplifying access to applications.
   • DElimination of the need for multi-factor authentication.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a primary benefit of adopting a Zero Trust model?

   • AReduces the attack surface
   • BGuarantees no security breaches will occur
   • CEliminates the need for user authentication
   • DSimplifies network infrastructure by removing all security controls
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   In traditional perimeter-based security, what is the primary trust boundary?

   • AThe individual device
   • BThe network perimeter
   • CThe application layer
   • DThe user's identity
   Reveal Solution Discussion Select an answer first