List the Design Consideration for User, Data, Devices, Applications and Workload, Network and Infrastructure ZERO-TRUST-DESIGN Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is implementing Zero Trust for a workforce that includes employees using corporate laptops and contractors using personal devices. The security team wants to enforce strong identity verification for all users, but also wants to minimize friction for contractors who only need access to a single project management application. Which approach best balances security and usability?

   • ARequire MFA only for employees, and allow contractors to use single sign-on with just a password.
   • BProvide contractors with corporate laptops to ensure uniform device compliance.
   • CRequire MFA for all users, but apply stricter device compliance policies for contractors' personal devices.
   • DUse the same access policies for all users, regardless of device type.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which device design consideration in Zero Trust ensures that only authorized and managed devices can access corporate resources?

   • ANetwork segmentation
   • BData encryption
   • CDevice compliance and access controls
   • DUser training
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In Zero Trust, what is the purpose of micro-segmentation for applications and workloads?

   • ATo encrypt all traffic between applications
   • BTo ensure applications are always available
   • CTo monitor user behavior within applications
   • DTo isolate workloads and limit lateral movement within the network
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is deploying a Zero Trust architecture for a multi-cloud environment. They have applications running in two different cloud providers and on-premises. They want to ensure secure communication between all workloads without relying on a public internet connection. What is the most appropriate design?

   • AEstablish private connectivity between clouds and on-premises, and use encrypted tunnels for all workload communication.
   • BUse a VPN concentrator in each cloud and route all traffic through it.
   • CMove all workloads to a single cloud provider to simplify connectivity.
   • DUse public internet with strong encryption (TLS) for all communication.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which network design concept in Zero Trust hides the network infrastructure and grants access only to authenticated and authorized users?

   • ASoftware-defined perimeter (SDP)
   • BDemilitarized zone (DMZ)
   • CNetwork address translation (NAT)
   • DVirtual private network (VPN)
   Reveal Solution Discussion Select an answer first