Implementing Zero Trust GCAD Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security architect is designing a Zero Trust network for a legacy application that cannot support modern authentication protocols. The application must be accessible to remote users. Which approach best aligns with Zero Trust while addressing the constraint?

   • APlace the application behind an application proxy that enforces authentication and session policies.
   • BMigrate the application to a modern platform immediately.
   • CExpose the application directly to the internet and rely on the legacy authentication.
   • DRequire users to connect via VPN and then access the application.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An organization is implementing Zero Trust and needs to ensure that only compliant devices can access sensitive data. Which governance control should be enforced?

   • AEncrypt all data at rest and in transit.
   • BAllow all devices that have valid user credentials.
   • CUse a strong password policy for all users.
   • DRequire devices to have up-to-date antivirus and patch levels before granting access.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A healthcare organization is adopting Zero Trust. They must ensure that only authorized devices can access patient records, and they need to enforce this policy consistently across all access requests. Which governance control should they implement first?

   • ADefine a conditional access policy that requires device compliance and multi-factor authentication for every access to patient records.
   • BDeploy a security information and event management (SIEM) system to log all access to patient records for later review.
   • CCreate a network segmentation policy that places all patient records on a separate VLAN with no external access.
   • DImplement a data loss prevention (DLP) solution that blocks any transfer of patient records to external storage.
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company is implementing Zero Trust and must decide how to handle access to a sensitive database. The database is used by multiple applications, each with different data access needs. Which approach best enforces least privilege?

   • ACreate a single service account for all applications to access the database.
   • BGrant database access based on the user's role, not the application.
   • CUse separate service accounts for each application and grant only the necessary database permissions.
   • DAllow all applications to use the same network path to the database.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A company is assessing its Zero Trust maturity. They currently have a SIEM, but they do not have automated policy enforcement; access decisions are made manually by administrators. They want to move to a higher maturity level. Which capability should they add first?

   • AA more comprehensive SIEM with advanced analytics and threat intelligence.
   • BA network segmentation project that divides the network into multiple VLANs.
   • CAutomated policy enforcement that uses identity and device signals to grant or deny access in real time.
   • DA manual access review process that is performed quarterly.
   Reveal Solution Discussion Select an answer first