A financial services firm is implementing Zero Trust. They need to reduce the risk of a compromised workstation accessing sensitive trading systems. They also want to minimize the impact of a potential breach. Which strategy should they adopt?

Implement micro-segmentation to isolate trading systems and require multi-factor authentication for all access.

Deploy a next-generation firewall at the internet edge and block all inbound traffic.

Enable full disk encryption on all workstations and enforce strong password policies.

Use a single sign-on (SSO) solution for all applications and rely on the corporate network perimeter.

A multinational corporation is implementing Zero Trust. They must comply with data residency regulations that require personal data to remain in specific geographic regions. They also need to provide employees with access to applications from any location. Which governance approach best supports both requirements?

Implement micro-segmentation within each region and allow cross-region access for all users.

Use a software-defined perimeter that grants access based on user identity only, ignoring location.

Enforce conditional access policies that route users to the nearest regional instance and block access to data outside their region.

Deploy a single global instance of all applications and use a VPN for remote access.

What is the primary purpose of micro-segmentation in a Zero Trust implementation?

To replace the need for identity verification

To provide a single sign-on experience

To isolate workloads and limit lateral movement

In a Zero Trust architecture, what does 'least privilege access' mean?

Users receive the minimum level of access required to perform their job functions.

Users must request access through a formal approval process for every resource.

Users are granted access to all resources but with read-only permissions.

Access is granted based on the user's seniority in the organization.

GIAC Cloud Security Architecture and Design

Domain 5Objective 1

Implementing Zero Trust GCAD Practice Questions (Page 10)

Part of the Zero Trust and Governance domain, which makes up ~10% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 3–4 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

5concepts

Questions 46–49

46application · medium
A financial services firm is implementing Zero Trust. They need to reduce the risk of a compromised workstation accessing sensitive trading systems. They also want to minimize the impact of a potential breach. Which strategy should they adopt?
Select an answer first
47expert · hard
A multinational corporation is implementing Zero Trust. They must comply with data residency regulations that require personal data to remain in specific geographic regions. They also need to provide employees with access to applications from any location. Which governance approach best supports both requirements?
Select an answer first
48foundation · easy
What is the primary purpose of micro-segmentation in a Zero Trust implementation?
Select an answer first
49foundation · easy
In a Zero Trust architecture, what does 'least privilege access' mean?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.