2.1 Describe Key Characteristics of Zero Trust Network Access (ZTNA) CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–23

1. 21foundation · easy

   Which statement best describes the core principle of Zero Trust Network Access (ZTNA)?

   • ATrust is granted based on the user's network location, such as being on the corporate LAN.
   • BAccess is granted only after verifying the user and device, regardless of their network location.
   • CAccess is granted based on the security of the user's internet connection, such as using a secure Wi-Fi network.
   • DOnce a user is authenticated, they retain access to all applications for the duration of their session.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large enterprise is implementing ZTNA. They have a mix of on-premises and cloud applications. Their security team requires that all access decisions be logged and auditable. They also have a strict requirement that no application should be directly reachable from the internet. They are evaluating two ZTNA architectures: one where the broker is deployed on-premises and one where the broker is a cloud service. Which architecture is more suitable for their requirements?

   • AAn on-premises broker, as it provides better performance for on-premises applications and ensures all logs are stored locally.
   • BThe choice of broker location does not matter, as long as the policy engine is in the cloud.
   • CA cloud-based broker, as it can provide a single point of control for both on-premises and cloud applications, and can be configured to keep applications hidden from the internet.
   • DA hybrid approach is not possible; they must choose one or the other.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   What is an operational benefit of ZTNA for end users?

   • AUsers must install complex VPN clients on every device.
   • BUsers get a consistent access experience from any location or device.
   • CUsers are required to connect to the corporate network to access applications.
   • DUsers must remember multiple passwords for each application.
   Reveal Solution Discussion Select an answer first