Zero-Trust Security JN0-1103 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A technology company is implementing zero-trust. The security team must ensure that a developer's access to production systems is automatically revoked if the developer's account shows signs of compromise, such as a login from an unusual location. However, the team also wants to avoid disrupting legitimate work. Which strategy best balances security and usability?

   • AIgnore the risk signal and continue to allow access, relying on post-incident analysis.
   • BImmediately revoke all access for the developer upon any risk signal.
   • CRequire the developer to re-authenticate with MFA only at the start of each day.
   • DImplement adaptive access controls that step up authentication or restrict access when risk is detected, rather than immediately revoking all access.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which zero-trust implementation strategy involves dynamically adjusting access rights based on real-time risk signals such as user behavior or device posture?

   • AVirtual LAN (VLAN) configuration
   • BNetwork address translation (NAT)
   • CAdaptive access controls
   • DStatic firewall rules
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A government agency is implementing zero-trust. The security team must ensure that a contractor's device, which is not managed by the agency, can access only the specific document repository required for the contract. The agency also requires that the contractor's access be revoked immediately when the contract ends. Which approach best meets these requirements?

   • AAllow access without device verification because the contractor is authenticated by the agency.
   • BGrant access to the specific repository with a policy that verifies the device and includes an expiration date tied to the contract.
   • CGrant the contractor access to the entire document management system and manually revoke access when the contract ends.
   • DProvide the contractor with a VPN connection to the agency network and rely on network-level access controls.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a zero-trust security model, what does the principle of 'least privilege access' require?

   • AUsers are granted administrative rights by default to ensure they can perform their duties without delays.
   • BAll users in the same department share identical access permissions to simplify management.
   • CUsers receive only the minimum level of access necessary to perform their specific job functions.
   • DAccess rights are granted based on the user's seniority within the organization.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A retail company is deploying a zero-trust architecture. The security architect must ensure that only managed laptops with up-to-date antivirus can access the inventory management system. Which two components are required to enforce this requirement?

   • AA load balancer and a web application firewall.
   • BA device posture check and a policy enforcement point.
   • CA network access control list and a DHCP server.
   • DA firewall and a VPN concentrator.
   Reveal Solution Discussion Select an answer first