1.6 Explain the Concept of Zero Trust CYBERSECURITY-APPRENTICE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Zero Trust architecture, which component focuses on ensuring that only authorized devices can access resources?

   • ANetwork
   • BData
   • CDevice
   • DIdentity
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes the core principle of the Zero Trust security model?

   • ATrust is established based on the user's location within the network.
   • BTrust is granted once and then continuously monitored for anomalies.
   • CTrust is never assumed and every access request must be verified.
   • DTrust is based on the strength of the password used for authentication.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is planning to adopt a Zero Trust model. They currently have a mix of on-premises data centers and multiple public cloud environments. The CISO wants to implement a consistent security policy across all environments. What is the most critical architectural consideration for this hybrid cloud Zero Trust implementation?

   • AUsing a single cloud provider to simplify the architecture.
   • BImplementing a centralized policy management plane that can apply consistent policies across all environments.
   • CEnsuring the physical security of each data center and cloud provider's facilities.
   • DFocusing primarily on securing the network perimeter of each environment.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is moving from a traditional perimeter-based security model to a Zero Trust model. The security team wants to ensure that every access request, regardless of whether it originates from inside or outside the corporate network, is treated with the same level of scrutiny. Which core principle should guide their implementation?

   • AVerify every access request as if it originates from an untrusted network
   • BFocus verification efforts primarily on external traffic and treat internal traffic as trusted
   • CTrust users and devices once they have passed an initial authentication check
   • DGrant broad access to users once they are connected to the corporate VPN
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the purpose of micro-segmentation in a Zero Trust implementation?

   • ATo isolate workloads and limit lateral movement
   • BTo create a single large network segment for easier management
   • CTo increase the speed of network communication
   • DTo replace the need for identity verification
   Reveal Solution Discussion Select an answer first