List the Design Consideration for User, Data, Devices, Applications and Workload, Network and Infrastructure ZERO-TRUST-DESIGN Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is deploying Zero Trust and wants to ensure that only managed devices can access the corporate network. They also want to automatically remediate non-compliant devices. What should they implement?

   • AA VPN that requires a username and password.
   • BA strong firewall that blocks all inbound traffic from unknown IP addresses.
   • CNetwork access control (NAC) that integrates with device management to quarantine non-compliant devices.
   • DA proxy server that logs all web traffic.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a Zero Trust data protection strategy, what is the primary purpose of data classification?

   • ATo encrypt all data at rest and in transit regardless of its content
   • BTo assign a level of sensitivity to data so that appropriate security controls can be applied
   • CTo ensure data is stored in a specific geographic region
   • DTo delete data that is no longer needed by the organization
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is implementing Zero Trust for its corporate devices. They want to ensure that only devices with up-to-date antivirus and encryption are allowed to access internal resources. What should they implement?

   • AUser training on how to avoid phishing emails.
   • BDevice compliance policies that check antivirus status and disk encryption before granting access.
   • CNetwork segmentation to isolate devices from each other.
   • DA strong password policy for all device users.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A hospital is implementing Zero Trust and must comply with strict data privacy regulations. They have a mix of legacy on-premises systems and modern cloud services. They want to ensure that patient data is protected and that access is auditable. Which design consideration is most important?

   • AIntegrating security controls across on-premises and cloud to provide a unified audit trail and consistent policies.
   • BFocusing on cloud security and gradually migrating all legacy systems to the cloud.
   • CUsing separate security tools for on-premises and cloud to avoid complexity.
   • DPrioritizing device compliance over data protection.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which design consideration for applications in Zero Trust involves giving each workload a unique identity to authenticate and authorize its access to other resources?

   • AAPI security
   • BMicro-segmentation
   • CWorkload identity
   • DData classification
   Reveal Solution Discussion Select an answer first