1.3 Explain the Concept of Zero Trust and Define Its Key Principles CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In the Zero Trust model, what is the default trust level for any user or device attempting to access a resource?

   • ATrusted if they are on the corporate network
   • BTrusted if they are using a company-issued device
   • CUntrusted until verified
   • DTrusted if they have valid credentials
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which scenario best illustrates the principle of least privilege?

   • AA database administrator is given access to the entire network for troubleshooting.
   • BA new employee is given the same permissions as the IT manager to ensure they can work independently.
   • CAll employees are given write access to the finance folder to encourage collaboration.
   • DA marketing employee is granted read-only access to the customer database for a specific campaign.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the core assumption behind the principle of breach assumption?

   • AThat only external attackers pose a threat to the organization
   • BThat a breach is unlikely if all security controls are properly configured
   • CThat the network perimeter is secure and can be trusted
   • DThat an attacker may already be inside the network
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which statement best describes the core shift in security approach that the Zero Trust model introduces?

   • AIt focuses exclusively on securing data at rest and in transit, ignoring user identity.
   • BIt moves from implicit trust based on network location to continuous verification of every access request.
   • CIt grants broader access to users once they have passed an initial authentication check.
   • DIt replaces all perimeter defenses with a single, centralized firewall.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security architect is designing a new application deployment. The architect assumes that an attacker has already compromised one of the application's microservices. Which design choice best reflects the principle of breach assumption?

   • ASegment the microservices so that a compromise in one does not automatically grant access to others.
   • BRely on the cloud provider's security to protect all microservices.
   • CDeploy all microservices on the same host to simplify management.
   • DUse a single shared database for all microservices to improve performance.
   Reveal Solution Discussion Select an answer first