An organization is implementing Zero Trust and wants to ensure that only managed and compliant devices can access corporate email. They also need to enforce multi-factor authentication for all users. Which combination of components should they use?

Data loss prevention (DLP) and encryption to protect email content.

Device management (MDM) to enforce compliance and identity provider (IdP) with conditional access policies.

Network firewall and VPN concentrator to restrict access to the corporate network.

Security information and event management (SIEM) and intrusion detection system (IDS) to monitor for threats.

How do governance policies support Zero Trust implementation?

By providing a one-time approval for all future access

By eliminating the need for technical controls

By defining rules for access control and enforcing them consistently

By focusing only on external threats

A company is moving to a Zero Trust model and wants to implement continuous monitoring. Which practice best supports this goal?

Rely on periodic penetration testing to identify vulnerabilities.

Implement a SIEM but only review alerts during business hours.

Collect and analyze logs from all access points and use automated alerts for anomalous behavior.

Conduct quarterly security audits of access logs.

A company is implementing Zero Trust and wants to protect its data, not just the network. Which action is most aligned with the data component of Zero Trust?

Use strong authentication for all users accessing the network.

Classify data based on sensitivity and apply encryption and access controls accordingly.

Implement a data loss prevention solution without classification.

Focus on network segmentation to keep data on isolated subnets.

GIAC Cloud Security Architecture and Design

Domain 5Objective 1

Implementing Zero Trust GCAD Practice Questions (Page 1)

Part of the Zero Trust and Governance domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 3–4 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

5concepts

Questions 1–5

1expert · hard
An organization is evaluating Zero Trust maturity and finds that they have implemented MFA and device compliance but still allow broad network access once authenticated. Which maturity stage best describes this state?
Select an answer first
2application · medium
An organization is implementing Zero Trust and wants to ensure that only managed and compliant devices can access corporate email. They also need to enforce multi-factor authentication for all users. Which combination of components should they use?
Select an answer first
3foundation · easy
How do governance policies support Zero Trust implementation?
Select an answer first
4application · medium
A company is moving to a Zero Trust model and wants to implement continuous monitoring. Which practice best supports this goal?
Select an answer first
5application · medium
A company is implementing Zero Trust and wants to protect its data, not just the network. Which action is most aligned with the data component of Zero Trust?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.