Identify the Pillars of Zero Trust ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which security practice is a primary focus of the Identity pillar in a Zero Trust architecture?

   • AEncrypting data at rest and in transit
   • BEnforcing least-privilege access and strong authentication
   • CAutomating incident response workflows
   • DSegmenting the network into micro-perimeters
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A global company wants to implement Zero Trust. They need to support employees using personal devices and accessing resources from various locations. The security team wants to enforce least-privilege access while minimizing friction for users. Which approach best aligns with the Identity pillar?

   • AGrant all employees the same level of access to simplify management.
   • BUse a VPN for all remote access and rely on network segmentation.
   • CRequire all employees to use company-issued devices with strict compliance policies.
   • DImplement risk-based conditional access policies that adjust authentication requirements based on user and device context.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A Zero Trust architecture requires a holistic approach. Which statement best describes the collective purpose of the five pillars?

   • AThe pillars are only needed for external threats.
   • BThe pillars work together to provide continuous verification and protection of all resources.
   • CThe pillars replace traditional perimeter security entirely.
   • DEach pillar operates independently to secure its own domain.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A healthcare organization is implementing Zero Trust. They want to ensure that only authorized users with compliant, healthy devices can access patient records. Which two pillars must be integrated to achieve this goal?

   • AIdentity and Network
   • BIdentity and Devices
   • CDevices and Automation & Orchestration
   • DNetwork and Applications & Data
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the main purpose of the Network pillar in a Zero Trust architecture?

   • ASegment traffic and restrict lateral movement
   • BVerify user identities through multi-factor authentication
   • CAutomate policy updates across all devices
   • DEncrypt data at rest in storage systems
   Reveal Solution Discussion Select an answer first