Zero Trust Fundamentals GDSA Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company is moving from a traditional perimeter-based model to Zero Trust. Which operational change is most indicative of this shift?

   • AReplacing the corporate firewall with a cloud access security broker (CASB)
   • BGranting network access based on the user's role and device compliance, rather than their IP address
   • CMoving all applications to a public cloud provider
   • DIncreasing the frequency of penetration tests
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A healthcare organization wants to implement Zero Trust for its electronic health record (EHR) system. They need to ensure that only authorized clinicians can access patient data, and that access is restricted to the minimum necessary for their role. Which deployment model is most appropriate?

   • AMicro-segmentation with network-level access control lists
   • BSoftware-defined perimeter that hides the EHR system from the network
   • CIdentity-based deployment with role-based access control (RBAC) and multi-factor authentication
   • DTraditional VPN with user-level authentication
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of micro-segmentation in a Zero Trust architecture?

   • ATo replace all firewalls with a single cloud-based security service.
   • BTo encrypt all data in transit between users and applications.
   • CTo isolate workloads and limit lateral movement by enforcing granular security policies between segments.
   • DTo provide a single sign-on experience for all enterprise applications.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company's security team is comparing Zero Trust with their current 'castle-and-moat' model. Which limitation of the traditional model is most directly addressed by Zero Trust?

   • ATraditional models are too expensive to maintain.
   • BTraditional models cannot support cloud applications.
   • COnce an attacker breaches the perimeter, they can move laterally to any internal resource.
   • DTraditional models cannot protect against malware infections on user devices.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   In a Zero Trust model, what does the principle of least privilege access require?

   • AAccess is granted based on the user's seniority in the organization, with higher-level employees receiving more permissions.
   • BUsers are granted broad access to all resources but are monitored to ensure they do not misuse their privileges.
   • CUsers are granted the minimum level of permissions needed to perform their job functions, and those permissions are reviewed and adjusted regularly.
   • DAdministrators receive the same access rights as regular users to simplify management.
   Reveal Solution Discussion Select an answer first