List the Design Consideration for User, Data, Devices, Applications and Workload, Network and Infrastructure ZERO-TRUST-DESIGN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization is moving its applications to a microservices architecture in the cloud. They want to ensure that each microservice can only communicate with specific other services, and that API calls are authenticated. Which design should they adopt?

   • AUse mutual TLS (mTLS) between services but allow all services to communicate freely.
   • BPlace all microservices in the same subnet and rely on a single API gateway for all traffic.
   • CExpose all microservices publicly and protect them with a web application firewall (WAF).
   • DImplement micro-segmentation between services and use workload identities for API authentication.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare organization is implementing Zero Trust to protect patient records. They need to ensure that sensitive data is encrypted both in transit and at rest, and that only authorized personnel can access it. Which design consideration should be prioritized?

   • AClassify data based on sensitivity and apply encryption and access controls accordingly.
   • BGrant all employees access to patient records to ensure availability.
   • CFocus on network encryption only, since data at rest is protected by the database vendor.
   • DEncrypt all data with the same key to simplify management.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company operates a hybrid environment with workloads on-premises and in the cloud. They want to apply consistent Zero Trust policies across both environments. What is the most effective approach?

   • ARely on the cloud provider's security features for cloud workloads and on-premises firewalls for local workloads.
   • BUse a centralized policy management platform that can enforce security controls across on-premises and cloud resources.
   • CApply different security policies for each environment to account for their unique characteristics.
   • DMove all workloads to the cloud to simplify security management.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In Zero Trust network design, what is the primary goal of network segmentation?

   • ATo improve network speed and performance
   • BTo ensure all traffic is encrypted
   • CTo simplify network management and reduce complexity
   • DTo reduce the attack surface and contain potential breaches
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A multinational corporation is implementing Zero Trust across its global offices and cloud environments. They must comply with data residency regulations that require certain data to remain in specific geographic regions. What should they consider in their infrastructure design?

   • ADeploying cloud resources in the required regions and applying data residency policies.
   • BRelying on the cloud provider's default data storage location.
   • CEncrypting all data and ignoring geographic location.
   • DUsing a single global cloud region for all data to simplify management.
   Reveal Solution Discussion Select an answer first