Zero Trust Fundamentals GDSA Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security team is troubleshooting a Zero Trust implementation. Users report that they are being prompted for multi-factor authentication repeatedly during the same work session, even though they have already authenticated. The team suspects that the conditional access policy is misconfigured. Which adjustment is most likely to resolve the issue while maintaining security?

   • ARequire MFA for every request, including API calls
   • BRemove the conditional access policy entirely
   • CDisable MFA for all users to eliminate prompts
   • DIncrease the session timeout and allow trusted devices to skip MFA for a longer period
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization is designing a Zero Trust architecture for a hybrid environment with on-premises data center and cloud workloads. The security team wants to ensure that a compromised application cannot access other applications or data without explicit authorization. Which component is most directly responsible for enforcing this requirement?

   • AData loss prevention (DLP) system that monitors outbound data transfers.
   • BSecurity information and event management (SIEM) platform that aggregates logs.
   • CIdentity provider (IdP) that issues tokens for user authentication.
   • DNetwork micro-segmentation that restricts east-west traffic between workloads based on policy.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a Zero Trust architecture, which component is responsible for enforcing access policies based on device health and compliance?

   • AThe network component, which segments traffic and blocks malicious IP addresses.
   • BThe device component, which assesses the security posture of endpoints before allowing access.
   • CThe data component, which encrypts all data at rest and in transit.
   • DThe identity component, which authenticates users with multi-factor authentication.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is transitioning from a traditional perimeter model to Zero Trust. They have a legacy application that is accessed by employees and external partners. The application currently relies on network-level access controls. The security team wants to implement Zero Trust without disrupting business operations. Which strategy is most effective?

   • AGradually introduce identity-based access controls while keeping network-level controls as a fallback
   • BKeep the existing network controls and add identity-based controls only for external partners
   • CDeploy a new application instance with Zero Trust controls and migrate users over time
   • DImmediately remove all network-level controls and rely solely on identity-based access
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which characteristic is typical of a traditional perimeter-based security model but not of Zero Trust?

   • AOnce a user is inside the network, they are generally trusted and can access most internal resources.
   • BAccess decisions are based on user identity, device posture, and other contextual signals.
   • CAccess is granted on a per-session basis with continuous monitoring.
   • DNetwork traffic is encrypted between all internal services.
   Reveal Solution Discussion Select an answer first