Implementing Zero Trust GCAD Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   An organization is at the 'Initial' stage of Zero Trust maturity. They have a legacy on-premises application that cannot support modern authentication protocols. They want to move to the 'Advanced' stage but have limited budget. Which step should they take first?

   • ARewrite the legacy application to support modern authentication protocols.
   • BDisable the legacy application and move to a cloud-based alternative.
   • CPlace a reverse proxy in front of the legacy application to add authentication and authorization.
   • DDeploy a network firewall to isolate the legacy application.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   In a Zero Trust governance model, what is the role of compliance monitoring?

   • ATo grant temporary access to resources
   • BTo replace the need for access controls
   • CTo ensure that security policies are being followed and to detect violations
   • DTo encrypt data in transit
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A company is implementing Zero Trust and wants to protect against insider threats. They have decided to use micro-segmentation and continuous monitoring. Which combination of controls is most effective?

   • AMicro-segmentation to limit lateral movement and user behavior analytics to detect anomalies.
   • BMicro-segmentation alone, as it prevents insider threats.
   • CContinuous monitoring alone, as it detects all insider threats.
   • DStrong encryption and data loss prevention.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   An organization is at the 'Advanced' stage of the Zero Trust maturity model. They have implemented conditional access, micro-segmentation, and continuous monitoring. However, they are struggling with policy enforcement across hybrid cloud and on-premises environments. What should they do to improve governance?

   • ARely on the cloud provider's default security controls for the cloud environment and use on-premises controls for the data center.
   • BCreate separate policies for each environment and manage them independently.
   • CImplement a centralized policy management platform that can enforce consistent policies across all environments.
   • DDisable micro-segmentation in the cloud to simplify management.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company is implementing Zero Trust and wants to protect sensitive data stored in a cloud application. They need to ensure that data is encrypted at rest and in transit, and that access is logged. Which components should they use?

   • AA data loss prevention (DLP) solution and a SIEM.
   • BA web application firewall (WAF) and an intrusion detection system (IDS).
   • CA network firewall and a VPN concentrator.
   • DEncryption keys managed by a cloud KMS, TLS for data in transit, and audit logging for access.
   Reveal Solution Discussion Select an answer first