List the Design Consideration for User, Data, Devices, Applications and Workload, Network and Infrastructure ZERO-TRUST-DESIGN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which infrastructure design consideration is essential for integrating security controls in a Zero Trust architecture?

   • ADisabling all legacy security controls
   • BUsing a single vendor for all security products
   • CDeploying security controls only at the network perimeter
   • DCentralized visibility and policy management
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A financial institution is implementing Zero Trust. They want to ensure that users have access only to the data necessary for their job functions, and that access is continuously verified. Which two design considerations should they prioritize?

   • AData encryption and network segmentation.
   • BSingle sign-on and password complexity.
   • CLeast privilege access and continuous authentication.
   • DDevice compliance and secure APIs.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is implementing Zero Trust and has a mix of managed and unmanaged devices. They want to allow unmanaged devices to access some resources, but with limited functionality. They also need to ensure that managed devices have full access. What is the best approach?

   • ARequire all unmanaged devices to install a mobile device management (MDM) profile before access.
   • BBlock all unmanaged devices from accessing any corporate resources.
   • CTreat all devices the same and require the same level of access.
   • DUse conditional access policies that grant different levels of access based on device compliance status.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In Zero Trust, what does device posture checking refer to?

   • AMonitoring the device's battery and performance status
   • BTracking the physical location of the device using GPS
   • CEnsuring the device has a strong password and MFA enabled
   • DVerifying that a device meets security requirements before granting access
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization wants to protect its internal network by dividing it into smaller segments to limit lateral movement. They also want to ensure that only compliant devices can access each segment. Which design should they implement?

   • AA DMZ for all internal services.
   • BNetwork segmentation with device posture checks at each segment boundary.
   • CA flat network with a strong firewall at the internet edge.
   • DVLANs based on department, with no additional access controls.
   Reveal Solution Discussion Select an answer first