1.6 Explain the Concept of Zero Trust CYBERSECURITY-APPRENTICE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company is implementing Zero Trust and has decided to use micro-segmentation to protect its data center. The network team is concerned that creating too many segments will make the network complex and difficult to manage. What is the best way to address this concern while still achieving the security benefits of micro-segmentation?

   • AAvoid micro-segmentation and rely on strong firewall rules at the perimeter.
   • BUse a software-defined networking (SDN) solution to automate policy management and reduce manual configuration.
   • CCreate segments based on the physical location of the servers.
   • DCreate a single large segment for all applications to simplify management.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security architect is designing a Zero Trust access policy for a remote workforce. The company wants to balance security with user productivity. They have decided to implement continuous verification, but they are concerned about the user experience impact of frequent authentication prompts. Which approach best balances security and usability?

   • ARely on the VPN to provide security and only verify the user at login.
   • BGrant users access based on their IP address and trust them for the day.
   • CRequire MFA for every single request to every resource.
   • DUse a single sign-on (SSO) solution and only prompt for MFA when a risk signal is detected.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company's CISO is presenting the business case for Zero Trust to the board. A board member asks, 'How does Zero Trust differ from our current security model, which relies on a strong firewall at the network perimeter?' What is the most accurate distinction to highlight?

   • AZero Trust is a more advanced firewall that blocks more threats at the perimeter.
   • BZero Trust shifts the focus from securing the network perimeter to securing individual resources and verifying every request.
   • CZero Trust eliminates the need for firewalls and other network security controls.
   • DZero Trust is primarily a cloud security solution, while the perimeter model is for on-premises networks.
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is implementing Zero Trust and is deciding where to place its policy enforcement points (PEPs). They have a mix of SaaS applications, cloud-hosted VMs, and on-premises legacy applications. What is the most important factor to consider when deciding where to place PEPs?

   • APlacing all PEPs at the corporate network perimeter.
   • BPlacing a single PEP in the cloud to manage all traffic.
   • CPlacing PEPs as close to the resources they are protecting as possible.
   • DPlacing PEPs only on the user's device.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large enterprise is implementing Zero Trust. They have a mature identity management system and have implemented device compliance checks. However, they are struggling with how to handle communication between their internal microservices, which are hosted on a shared Kubernetes cluster. The security team wants to ensure that a compromised microservice cannot easily compromise other microservices in the same cluster. Which Zero Trust component and implementation technique should they prioritize?

   • ANetwork component with micro-segmentation
   • BData component with encryption at rest
   • CIdentity component with stronger authentication
   • DDevice component with more frequent compliance checks
   Reveal Solution Discussion Select an answer first