Implementing Zero Trust GCAD Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is implementing Zero Trust and wants to use continuous monitoring to detect compromised accounts. They have a SIEM but lack automated response capabilities. Which enhancement is most aligned with Zero Trust?

   • AIncrease the number of security analysts to review alerts manually.
   • BUse a separate monitoring tool for each cloud provider.
   • CStore logs for longer periods to support forensic analysis.
   • DIntegrate the SIEM with identity and access management to automatically revoke access on suspicious activity.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When planning incremental Zero Trust implementation, what is a recommended first step?

   • AImmediately replace all legacy systems
   • BDeploy a full Zero Trust solution across the entire network
   • CDisable all existing security controls
   • DIdentify and classify the organization's most critical data and applications
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An organization is at the 'Initial' stage of the Zero Trust maturity model. They have a flat network, no device inventory, and rely on VPN for remote access. They want to move to the 'Advanced' stage within a year but have limited budget and staff. Which incremental step should they take first to maximize security improvement?

   • ADeploy micro-segmentation across all workloads and enforce per-application policies.
   • BReplace the VPN with a software-defined perimeter (SDP) that provides per-session access to specific applications.
   • CEstablish a device inventory and implement conditional access policies for all remote access.
   • DImplement a SIEM and start collecting logs from all critical systems.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is implementing Zero Trust and wants to protect its applications from unauthorized access. They want to ensure that only authenticated and authorized users can reach the application, and they want to hide the application's IP address. Which component should they use?

   • AA network address translation (NAT) device that maps public IPs to private IPs.
   • BA reverse proxy with authentication and authorization, placed in front of the application.
   • CA load balancer that distributes traffic to multiple application instances.
   • DA web application firewall (WAF) with access control policies.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What does a Zero Trust maturity model help an organization determine?

   • AThe exact number of security tools needed
   • BThe total cost of implementing Zero Trust
   • CThe best vendor for Zero Trust solutions
   • DThe current state of Zero Trust adoption and the steps needed to improve
   Reveal Solution Discussion Select an answer first