Zero Trust Concept in Security Testing CT-STE Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   Which of the following is a Zero Trust best practice that should be assessed during security testing?

   • ARelying on the network perimeter to protect all resources
   • BContinuously monitoring and logging all access requests
   • CImplementing single-factor authentication for all users
   • DGranting all users the same level of access for simplicity
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A Zero Trust architecture uses micro-segmentation and a software-defined perimeter (SDP). A security test engineer is asked to test the effectiveness of the SDP in hiding services from unauthorized users. Which test is most appropriate?

   • AReview the SDP configuration to ensure it is correctly implemented.
   • BAttempt to access the services from an internal network without authentication.
   • CAttempt to access the services using a valid user's credentials from an external network.
   • DScan the network from an external perspective to see if the services are visible.
   Reveal Solution Discussion Select an answer first