What Is Zero Trust? CT-STE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a key limitation of traditional perimeter-based security that Zero Trust addresses?

   • AIt cannot protect against threats from outside the network.
   • BIt requires too many security controls, making it complex to manage.
   • CIt is not compatible with cloud computing.
   • DIt assumes that anything inside the network is trustworthy, leaving it vulnerable to insider threats and lateral movement.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is transitioning from a traditional perimeter-based model to Zero Trust. They have a large number of remote employees who use personal devices. Which challenge is most critical to address during this transition?

   • AEliminating all personal device usage to reduce risk.
   • BEnsuring that personal devices meet security compliance before granting access to corporate resources.
   • CIncreasing the bandwidth of the VPN concentrator to handle remote traffic.
   • DMigrating all corporate applications to the cloud to simplify access.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization is implementing Zero Trust and needs to protect data. Which control is most directly aligned with the data security pillar?

   • ARequiring multi-factor authentication for all users.
   • BImplementing network segmentation to isolate sensitive data stores.
   • CDeploying endpoint detection and response agents on all devices.
   • DEncrypting data at rest and in transit, and applying data loss prevention policies.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does Zero Trust differ from traditional perimeter-based security?

   • AZero Trust is only applicable to cloud environments, while traditional security is for on-premises networks.
   • BZero Trust relies on a strong firewall at the network edge, while traditional security uses micro-segmentation.
   • CZero Trust trusts everything inside the network, while traditional security verifies all traffic.
   • DZero Trust assumes no implicit trust and verifies every request, while traditional security trusts users and devices inside the network.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is a common challenge when implementing Zero Trust in an existing organization?

   • AThe need to replace all existing hardware with new devices.
   • BThe requirement to disconnect from the internet to ensure security.
   • CThe complexity of retrofitting legacy systems and applications to support continuous verification and least privilege.
   • DThe need to hire additional security staff to monitor all traffic manually.
   Reveal Solution Discussion Select an answer first