What Is Zero Trust? CT-STE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A large enterprise is planning to implement Zero Trust. They have many legacy applications that do not support modern authentication protocols. What is a practical first step in their migration strategy?

   • AImmediately decommission all legacy applications that cannot support modern authentication.
   • BPlace legacy applications behind an access proxy that enforces authentication and policy before allowing access.
   • CGrant legacy applications full network access until they can be updated.
   • DMove all legacy applications to a public cloud and rely on cloud security groups.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What does the Zero Trust principle 'assume breach' imply for security design?

   • AAssume that security controls are perfect and no further monitoring is needed.
   • BAssume that all users are malicious and deny all access by default.
   • CDesign systems with the assumption that a breach has already occurred or will occur, so limit the impact and verify continuously.
   • DFocus security efforts solely on preventing external attacks, as internal threats are unlikely.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team is designing a Zero Trust architecture and wants to protect the network. Which control is most aligned with the network security pillar?

   • ARequiring multi-factor authentication for all users.
   • BEncrypting all data at rest and in transit.
   • CDeploying endpoint detection and response agents on all devices.
   • DImplementing micro-segmentation to restrict lateral movement between workloads.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is comparing traditional perimeter security with Zero Trust. Which statement correctly highlights a key difference?

   • ATraditional security focuses on data protection, while Zero Trust focuses on network protection.
   • BTraditional security trusts all internal traffic, while Zero Trust verifies every request, even from inside the network.
   • CTraditional security uses multi-factor authentication, while Zero Trust relies on single sign-on.
   • DTraditional security is more effective in cloud environments, while Zero Trust is better for on-premises.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization is designing a Zero Trust access policy for its internal applications. Which combination of requirements best reflects the 'least privilege' principle?

   • AAccess is granted based on the user's seniority, with higher-level employees receiving broader access.
   • BUsers can access all internal applications after completing MFA, with access reviewed quarterly.
   • CUsers are granted access only to the specific applications and data required for their job function, with permissions that can be adjusted in real time.
   • DAll users receive the same baseline access to reduce administrative overhead.
   Reveal Solution Discussion Select an answer first