Zero Trust Concept in Security Testing CT-STE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a Zero Trust architecture, which component is responsible for ensuring that data is protected based on its classification and sensitivity?

   • ANetwork segmentation
   • BUser authentication mechanisms
   • CData security policies
   • DDevice compliance checks
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When incorporating Zero Trust into threat modeling, which of the following is a key attack vector to consider?

   • APhysical theft of the server hardware
   • BSocial engineering of the help desk staff
   • CDenial of service attacks on the internet gateway
   • DLateral movement between micro-segmented workloads
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has implemented micro-segmentation in its data center to isolate the web tier from the database tier. As a security test engineer, you are asked to validate the effectiveness of the segmentation. Which test approach is most appropriate?

   • AReview firewall logs to confirm that no traffic has been logged between the web and database tiers.
   • BVerify that the database tier is not accessible from the internet.
   • CAttempt to connect from the web tier to the database tier on the database port and verify the connection is blocked.
   • DScan the entire network for open ports and services to identify any misconfigurations.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a Zero Trust model, what does 'least privilege access' primarily aim to achieve?

   • AAllow users to request temporary elevation of privileges whenever needed.
   • BGrant users the minimum level of permissions needed to perform their job functions.
   • CEnsure that administrators have full access to all resources at all times.
   • DProvide all users with the same level of access to simplify management.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   During threat modeling for a Zero Trust architecture, the team is considering the risk of a compromised service account. The architecture uses service-to-service authentication with certificates. Which threat modeling consideration is most important?

   • AAssume the certificate is secure because it is stored in a hardware security module (HSM).
   • BAssume the service account is trusted because it uses certificate-based authentication.
   • CAssume the service account has limited access, so the risk is low.
   • DAssume the certificate could be stolen and model the impact of an attacker using it to access services.
   Reveal Solution Discussion Select an answer first