Zero Trust Networking GDSA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does mutual TLS (mTLS) differ from standard TLS in a Zero Trust environment?

   • AmTLS requires both the client and the server to present certificates, verifying each other's identity
   • BmTLS is used only for web traffic, while standard TLS is used for all other protocols
   • CmTLS eliminates the need for encryption by relying on certificate-based access control
   • DmTLS uses stronger encryption algorithms than standard TLS
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which security benefit is most directly achieved by implementing microsegmentation?

   • AIt eliminates the need for endpoint detection and response tools
   • BIt prevents all malware from being introduced into the network
   • CIt reduces the ability of an attacker to move laterally from one compromised workload to another
   • DIt guarantees that all east-west traffic is encrypted automatically
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is moving from a traditional perimeter-based security model to Zero Trust. The CISO wants to ensure that access decisions are based on the user's identity and device posture, not just the source IP address. Which architectural change is most aligned with this goal?

   • ASegment the network into multiple VLANs based on department and apply ACLs between them.
   • BStrengthen the perimeter firewall rules to block all traffic from untrusted external IP addresses.
   • CImplement a VPN that requires multi-factor authentication for all remote users.
   • DDeploy a policy enforcement point that evaluates user identity, device posture, and context before allowing access to each application.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of microsegmentation in a Zero Trust network?

   • ATo replace the need for encryption by isolating sensitive data on separate physical servers
   • BTo create fine-grained security policies that apply to individual workloads or applications
   • CTo consolidate multiple firewalls into a single centralized appliance for easier management
   • DTo divide the network into large broadcast domains to improve performance
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is a common recommended approach for deploying Zero Trust Networking in an existing enterprise environment?

   • ADisable all legacy security controls to avoid conflicts with new Zero Trust policies
   • BRequire all users to connect through a VPN before any Zero Trust policies are enforced
   • CImplement a phased migration that starts with high-value assets and gradually expands to the rest of the network
   • DReplace all existing security infrastructure with a single vendor's Zero Trust platform in one weekend
   Reveal Solution Discussion Select an answer first