1.6 Explain the Concept of Zero Trust CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization is building a Zero Trust architecture. They want to protect sensitive customer data by ensuring that only specific applications can access it, and that the data is encrypted both at rest and in transit. Which component of the Zero Trust architecture is the primary focus of this requirement?

   • AIdentity
   • BDevice
   • CNetwork
   • DData
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a key component of a Zero Trust architecture?

   • APerimeter firewall only
   • BIdentity verification
   • CSingle sign-on only
   • DVPN for remote access
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization is designing a Zero Trust architecture. They want to ensure that a user's access rights are dynamically adjusted based on real-time signals, such as user location, device health, and behavior patterns. Which component of the Zero Trust architecture is primarily responsible for evaluating these signals to make an access decision?

   • AThe identity provider (IdP)
   • BThe micro-segmentation gateway
   • CThe policy decision point (PDP)
   • DThe policy enforcement point (PEP)
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security team is implementing Zero Trust for a cloud-based application. They want to ensure that a user's access is automatically revoked if their device becomes compromised or if they travel to a high-risk location. Which implementation concept is most directly responsible for this dynamic access control?

   • ALeast privilege access
   • BData classification
   • CContinuous verification
   • DMicro-segmentation
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is implementing Zero Trust to protect its application servers. They want to isolate each application in its own segment so that if one server is compromised, an attacker cannot easily move laterally to other applications. Which Zero Trust implementation technique is being used?

   • ALeast privilege access
   • BContinuous monitoring
   • CMulti-factor authentication (MFA)
   • DMicro-segmentation
   Reveal Solution Discussion Select an answer first