What Is Zero Trust? CT-STE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A large enterprise is migrating to Zero Trust. They have a mix of modern cloud applications and legacy on-premises systems. The security team is concerned about the cost and complexity of the migration. Which migration strategy is most effective?

   • AReplace all legacy systems with cloud-native applications that natively support Zero Trust.
   • BDeploy Zero Trust only for cloud applications and leave on-premises systems on the traditional model.
   • CImplement Zero Trust in phases, starting with identity and access management, then expanding to device and network controls.
   • DImplement all Zero Trust controls simultaneously across the entire organization to avoid a prolonged transition.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a practical migration strategy for implementing Zero Trust?

   • ADeploying Zero Trust only for remote users, not for internal users.
   • BImplementing Zero Trust in a single phase by replacing all security controls at once.
   • CFocusing only on network security and ignoring identity and device controls.
   • DStarting with a pilot project on a less critical system, then gradually expanding to other areas.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a key component of a Zero Trust architecture?

   • AA demilitarized zone (DMZ) that separates public-facing servers from the internal network.
   • BIdentity and access management (IAM) that verifies users and devices before granting access.
   • CA VPN that creates a trusted tunnel for all remote users.
   • DA single firewall that protects the entire network perimeter.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is implementing Zero Trust and wants to apply the principle of least privilege. Which action is most aligned with this principle?

   • AGranting users access only to the specific resources they need for their current tasks, with permissions expiring after a set time.
   • BProviding all employees with the same level of access to simplify administration.
   • CGranting access to all resources once the user passes a background check.
   • DGranting access based on the user's job title, regardless of the specific task.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a traditional perimeter-based security model. They want to transition to Zero Trust. What is the most significant change in their security approach?

   • AIncreasing the number of firewalls and intrusion prevention systems at the network boundary.
   • BEliminating all passwords and using biometric authentication exclusively.
   • CMoving from trusting users inside the network to verifying every request, regardless of location.
   • DReplacing all existing security tools with cloud-native solutions.
   Reveal Solution Discussion Select an answer first