Zero-Trust Security JN0-1103 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A healthcare organization is implementing zero-trust. The security team must ensure that a physician's personal tablet can access patient records only when it is compliant with the organization's security policy. However, the tablet is not enrolled in the mobile device management system. The team must decide how to handle this device. Which approach aligns with zero-trust principles?

   • ADeny access to patient records until the tablet is enrolled in MDM and verified as compliant.
   • BAllow access but restrict it to read-only functionality.
   • CGrant temporary access and monitor the physician's activity for any anomalies.
   • DAllow access because the physician's credentials are valid and the device is used by a trusted employee.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which component of a zero-trust architecture is responsible for making allow/deny decisions based on identity, device posture, and context?

   • ASecurity Information and Event Management (SIEM) system
   • BPolicy Enforcement Point (PEP)
   • CIdentity Provider (IdP)
   • DNetwork segmentation gateway
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A financial services firm is implementing zero-trust. The security architect must design a solution that enforces access policies based on user identity, device posture, and real-time risk. The firm also requires that all access decisions be logged for compliance. Which combination of components is most appropriate?

   • AA firewall, a VPN concentrator, and a network monitoring tool.
   • BA load balancer, a web application firewall, and a SIEM.
   • CAn identity provider, a directory service, and a DNS server.
   • DA policy engine, a policy enforcement point, and a logging and analytics system.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A healthcare provider is designing a zero-trust architecture. The architect needs to ensure that a doctor's tablet can access patient records only when it is compliant with the mobile device management policy. Which component should be used to verify the tablet's compliance before access is granted?

   • AA device posture assessment service that checks the tablet's configuration and security state.
   • BA network firewall that filters traffic based on the tablet's IP address.
   • CA DNS server that resolves the patient record system's hostname.
   • DA load balancer that distributes traffic to the patient record system.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A government agency is implementing zero-trust. The security team wants to detect and respond to anomalous behavior, such as a user downloading large amounts of data at unusual hours. Which zero-trust implementation strategy is most directly applicable?

   • AAdaptive access controls that adjust permissions based on risk.
   • BContinuous monitoring of user and entity behavior analytics.
   • CIdentity and access management with role-based access control.
   • DMicro-segmentation of the network into isolated zones.
   Reveal Solution Discussion Select an answer first