2.1 Describe Key Characteristics of Zero Trust Network Access (ZTNA) CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is looking to improve the user experience for remote employees who currently use a VPN. Employees complain about having to connect to the VPN before they can access any application and the slow performance when accessing cloud-based tools. Which ZTNA benefit directly addresses this user experience issue?

   • AZTNA allows users to access all applications with a single click, without any authentication.
   • BZTNA uses a simpler authentication process that does not require a username and password.
   • CZTNA provides direct, secure access to individual applications without the need to connect to the entire corporate network first.
   • DZTNA provides a faster internet connection for all users by optimizing their local network.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an identity-based ZTNA access model, what determines which applications a user can access?

   • AThe user's role and attributes
   • BThe security group of the application server
   • CThe user's IP address
   • DThe application's location in the network
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In a Zero Trust Network Access model, what does 'always verify' mean in practice?

   • AThe network continuously scans for malware on all connected devices.
   • BAll network traffic is encrypted to ensure confidentiality.
   • CUsers must authenticate with a password every time they access any application.
   • DEvery access request is checked against policy before granting access, regardless of the user's location.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is implementing ZTNA. They have a requirement that access to a specific application should only be granted if the user's device has the latest operating system patches and a company-approved antivirus software running. Which ZTNA component is responsible for evaluating this requirement?

   • AThe application itself, which can check the device's security posture before allowing access.
   • BThe policy engine, which can incorporate device posture information into the access decision.
   • CThe broker, which can inspect the device's configuration before establishing a connection.
   • DThe identity provider, which can verify the user's identity and device compliance.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key security advantage of ZTNA over traditional VPN?

   • AZTNA provides faster internet speeds than VPNs.
   • BZTNA hides applications from unauthorized users, reducing the attack surface.
   • CZTNA eliminates the need for user authentication.
   • DZTNA encrypts all traffic, while VPNs do not encrypt traffic.
   Reveal Solution Discussion Select an answer first