2.1 Describe Key Characteristics of Zero Trust Network Access (ZTNA) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization is designing a ZTNA architecture. They want to ensure that access decisions are made dynamically based on user identity, device posture, and real-time risk signals, rather than static rules. They also need to integrate with their existing identity provider (IdP) for user authentication. Which component of the ZTNA architecture is primarily responsible for evaluating these dynamic signals and making the final allow/deny decision?

   • AThe broker, which establishes the secure connection between the user and the application.
   • BThe policy engine, which continuously evaluates context and enforces the access decision.
   • CThe identity provider, which authenticates the user and issues tokens.
   • DThe application itself, which should enforce its own access control lists.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security architect is explaining the 'never trust, always verify' principle to a new team member. They are discussing a scenario where a user has already authenticated to the ZTNA solution and has an active session. The user then requests access to a sensitive financial application. According to the core principle of ZTNA, what should happen?

   • AThe request should be evaluated again by the policy engine, checking the user's identity, device posture, and other context before granting access.
   • BAccess should be granted automatically because the user has already authenticated and has an active session.
   • CAccess should be denied because the user should not be able to access any application without re-authenticating every time.
   • DAccess should be granted only if the user's IP address is within the corporate network range.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which component in ZTNA architecture is responsible for verifying the identity of users?

   • AThe policy engine
   • BThe broker
   • CThe identity provider
   • DThe application connector
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is evaluating ZTNA and VPN solutions. They have a requirement to provide remote access to a legacy application that only supports a specific client software and does not work well in a web browser. The application is critical for a small team of contractors. What is the most important consideration when choosing between ZTNA and VPN for this specific application?

   • AWhether the ZTNA solution can support non-web-based applications or if a VPN is required for this legacy client.
   • BThe user experience, as ZTNA always provides a better user experience than a VPN.
   • CThe need for a public IP address for the application, which is required for both ZTNA and VPN.
   • DThe cost of the solution, as ZTNA is always more expensive than a VPN.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In a ZTNA architecture, what is the role of the policy engine?

   • AIt evaluates access requests against security policies and makes allow/deny decisions.
   • BIt authenticates users and issues tokens.
   • CIt establishes the encrypted tunnel between the user and the application.
   • DIt stores user credentials and manages passwords.
   Reveal Solution Discussion Select an answer first