What Is Zero Trust? CT-STE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which statement best defines the Zero Trust security model?

   • AA model that eliminates all security controls and relies on user awareness to protect data.
   • BA model that trusts all traffic within a virtual private network (VPN) but requires multi-factor authentication for remote users.
   • CA model that trusts users and devices inside the corporate network but verifies all external access attempts.
   • DA model that assumes no implicit trust and verifies every request regardless of its origin.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security architect is designing a Zero Trust model for a hybrid environment with on-premises data centers and cloud workloads. The organization wants to ensure that a compromised user account cannot access sensitive data in the cloud. Which combination of controls best achieves this objective?

   • AGranting all users access to the cloud workloads but logging all activity for later review.
   • BA strong perimeter firewall that blocks all inbound traffic from the internet to the cloud workloads.
   • CConditional access policies that require device compliance and risk-based MFA, combined with just-in-time access grants to sensitive data.
   • DUsing a VPN for all cloud access and requiring a one-time password at login.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst is reviewing a Zero Trust architecture. Which statement correctly describes the role of identity in this architecture?

   • AIdentity is the primary security boundary, and access decisions are based on verified identity and context.
   • BIdentity is used only for administrative users, not for regular employees.
   • CIdentity is only used for initial authentication, and then network access is granted.
   • DIdentity is less important than network security in Zero Trust.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An organization is implementing Zero Trust and faces resistance from employees who find the additional authentication steps burdensome. Which approach best addresses this concern while maintaining security?

   • AImplementing risk-based conditional access that prompts for additional verification only when the access request is deemed risky.
   • BProviding users with a one-time password that grants access for the entire day.
   • CRequiring multi-factor authentication for every access request, regardless of risk.
   • DRemoving all additional authentication steps to improve user satisfaction.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security architect is planning a Zero Trust architecture. Which set of components must be included to cover the key pillars of Zero Trust?

   • APublic key infrastructure, hardware security modules, certificate authorities, and encryption keys.
   • BFirewall, VPN concentrator, intrusion detection system, and antivirus software.
   • CSecurity information and event management, security orchestration, automation, and response, and threat intelligence feeds.
   • DIdentity provider, device compliance checks, micro-segmentation, and data classification.
   Reveal Solution Discussion Select an answer first