Zero-Trust Security JN0-1103 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A multinational corporation is implementing zero-trust. The security team must enforce access policies that consider user identity, device compliance, and the sensitivity of the data being accessed. They also need to support a hybrid environment with on-premises and cloud applications. Which architecture component is most critical to centralize and enforce these policies consistently?

   • AA network access control list that restricts traffic based on user group membership.
   • BA centralized policy engine that evaluates identity, device, and data sensitivity and sends decisions to distributed enforcement points.
   • CA single VPN concentrator that authenticates users and grants access to all applications.
   • DA set of per-application firewalls that each enforce their own access rules.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A bank is implementing zero-trust and wants to automatically restrict access for users who exhibit risky behavior, such as logging in from a new location or using a compromised device. Which implementation strategy best supports this requirement?

   • AAdaptive access controls that adjust permissions based on real-time risk signals.
   • BContinuous monitoring to log all user activity.
   • CStatic role-based access control to define user permissions.
   • DMicro-segmentation to isolate the bank's critical applications.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a key component of a zero-trust architecture that verifies the security posture of the requesting device?

   • ADevice trust assessment
   • BLoad balancer configuration
   • CNetwork firewall rules
   • DDNS resolution
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A software company wants to implement zero-trust for its internal development environment. Developers need access to source repositories and build servers, but the security team wants to minimize the attack surface if a developer's workstation is compromised. Which implementation strategy is most effective?

   • AIncrease the frequency of vulnerability scans on the development servers.
   • BDeploy micro-segmentation so each developer can only reach the specific repositories and build services required for their role.
   • CMove all development resources to a single subnet and rely on host-based firewalls.
   • DRequire all developers to use a shared jump host to access the development environment.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement accurately describes the core principle of 'never trust, always verify' in a zero-trust security model?

   • ATrust is granted based on the network location of the user, such as being inside the corporate office.
   • BEvery access request is treated as though it originates from an untrusted source until it is verified.
   • CUsers are verified once during initial login and then granted access for the entire session.
   • DDevices that have passed a one-time compliance check are trusted indefinitely.
   Reveal Solution Discussion Select an answer first