Zero Trust Fundamentals GDSA Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A mid-sized company is considering Zero Trust but has limited security staff and budget. They want to improve security without a massive overhaul. Which approach is most pragmatic?

   • AImplement full network micro-segmentation across all data center and cloud environments.
   • BStart with identity-based controls: enforce MFA, single sign-on, and conditional access policies.
   • CDeploy a software-defined perimeter for every application, including internal legacy systems.
   • DPurchase a next-generation firewall and rely on it as the primary security control.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has implemented Zero Trust but is still experiencing security incidents. An investigation reveals that once an attacker compromises a service account, they can access many resources because the account has broad permissions. Which Zero Trust principle was not properly applied?

   • AMicro-segmentation, because the network was not segmented.
   • BLeast privilege access, because the service account has more permissions than necessary.
   • CData classification, because sensitive data was not labeled.
   • DNever trust, always verify, because the attacker was not continuously verified.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A system administrator wants to apply the principle of least privilege to a set of microservices. Each microservice needs to access a specific database and no other resources. Which approach best implements least privilege?

   • AUse a shared service account with broad permissions to simplify management
   • BGrant all microservices access to all databases to avoid configuration errors
   • CAssign permissions based on the microservice's network segment
   • DGive each microservice a dedicated service account with permissions limited to its required database
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is migrating from a traditional network where all internal servers trust each other. The security team wants to implement Zero Trust. Which action is most effective at eliminating implicit trust between servers?

   • ARequire stronger passwords for server administrator accounts.
   • BDeploy micro-segmentation policies that allow only specific server-to-server communication on required ports.
   • CMove all servers to a cloud environment.
   • DInstall host-based intrusion detection on every server.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement best describes the Zero Trust principle of 'never trust, always verify'?

   • AAll network traffic is encrypted, so authentication is only required for users accessing resources from outside the corporate network.
   • BAccess decisions are based on continuous verification of identity, device, and context, not on the network location of the request.
   • CUsers are authenticated once at the perimeter and then granted unrestricted access to all internal resources for the session.
   • DDevices that are compliant with security policies are automatically trusted for the entire time they are connected to the network.
   Reveal Solution Discussion Select an answer first