What Is Zero Trust? CT-STE Practice Questions (Page 6)

Questions 26–29

1. 26application · medium

   A company is implementing Zero Trust and wants to enforce the 'assume breach' principle. Which practice best supports this principle?

   • AFocusing all security efforts on preventing external attacks at the network perimeter.
   • BRelying on a strong firewall and antivirus to keep attackers out.
   • CImplementing micro-segmentation to limit lateral movement and continuously monitoring for anomalous activity.
   • DGranting all users the same level of access to simplify management.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In a Zero Trust model, what is the default stance toward a request that originates from inside the corporate network?

   • AAllow the request but log it for later review.
   • BDeny the request because it comes from inside the network.
   • CTrust the request because it originates from inside the trusted network perimeter.
   • DVerify the request just as thoroughly as a request from outside the network.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is a core principle of Zero Trust?

   • ALeast privilege access, granting users only the permissions necessary to perform their tasks.
   • BTrust based on the physical location of the user's device.
   • CA single verification at login that grants access for the entire session.
   • DImplicit trust for users who have passed a one-time background check.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company wants to implement Zero Trust but is concerned about user productivity. Which approach balances security and usability?

   • ARequiring multi-factor authentication for every single request, even within the same session.
   • BImplementing single sign-on and contextual access policies that minimize authentication prompts while still verifying risk.
   • CDisabling all legacy applications to reduce security risks.
   • DGranting all users broad access to avoid access requests.
   Reveal Solution Discussion Select an answer first