List the Design Consideration for User, Data, Devices, Applications and Workload, Network and Infrastructure ZERO-TRUST-DESIGN Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A software company is developing a new application that will run in containers on a cloud platform. They want to ensure that the application can securely access other cloud services without storing long-lived credentials. What should they use?

   • AWorkload identity federation that provides short-lived tokens for the application.
   • BA shared API key stored in the container image.
   • CA certificate that is renewed manually every year.
   • DA service account with a static password.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Zero Trust data design consideration is specifically focused on preventing sensitive data from being exfiltrated or shared inappropriately?

   • AData backup
   • BData encryption
   • CData masking
   • DData loss prevention (DLP)
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is deploying a Zero Trust architecture for its remote workforce. Users access internal applications from personal laptops and company-issued phones. The security team wants to ensure that only authorized users with compliant devices can access sensitive data, while minimizing friction for legitimate users. Which combination of controls should the team implement?

   • AGrant access based on user role only, and rely on the corporate firewall to block unauthorized devices.
   • BImplement single sign-on (SSO) and trust all devices that can authenticate successfully.
   • CUse a VPN for all remote access and require users to change passwords every 30 days.
   • DRequire multi-factor authentication (MFA) for all users and enforce device compliance policies before granting access.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A large enterprise is migrating to a Zero Trust model and must protect sensitive data across on-premises file servers and cloud storage. They have a requirement to prevent data exfiltration while also enabling collaboration with external partners. Which design consideration is most critical?

   • AMoving all data to the cloud to gain better security controls.
   • BBlocking all external sharing to ensure data is never exfiltrated.
   • CImplementing data classification and DLP policies that differentiate between internal and external sharing.
   • DEncrypting all data with a single enterprise key to simplify management.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is designing a Zero Trust network for its hybrid cloud environment. They want to ensure that all communication between users and applications is encrypted, and that access is granted based on user identity rather than IP address. Which approach should they use?

   • ADeploy a software-defined perimeter (SDP) that authenticates users and encrypts all traffic.
   • BUse a traditional firewall with allowlists based on source IP addresses.
   • CImplement network segmentation and rely on VPN for remote access.
   • DUse a network access control (NAC) solution that checks device posture only.
   Reveal Solution Discussion Select an answer first