1.3 Explain the Concept of Zero Trust and Define Its Key Principles CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How does the principle of breach assumption influence security design?

   • AIt focuses on preventing all attacks by strengthening the perimeter firewall.
   • BIt leads to designing systems that contain and limit the damage of a compromise.
   • CIt prioritizes rapid recovery over detection and containment.
   • DIt eliminates the need for user authentication because the network is already compromised.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security architect is designing a new system and wants to apply the principle of breach assumption. Which approach best reflects this principle?

   • AUse encryption for all data in transit and at rest.
   • BFocus on preventing all external attacks from entering the network.
   • CDesign the system so that a compromise of one component does not automatically compromise the entire system.
   • DImplement strong authentication for all users.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does continuous monitoring and validation contribute to enforcing Zero Trust?

   • AIt requires users to re-authenticate every few minutes, regardless of risk.
   • BIt only monitors traffic leaving the network to detect data exfiltration.
   • CIt verifies the identity and security posture of users and devices at every access attempt.
   • DIt replaces the need for authentication by constantly analyzing network traffic.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is implementing Zero Trust and wants to ensure that users are verified not only at login but throughout their entire session. Which practice best supports this requirement?

   • ARequire a strong password and change it every 90 days.
   • BRe-authenticate users when they request access to sensitive resources or when risk indicators change.
   • CUse a VPN to ensure all traffic is encrypted.
   • DAuthenticate users only once when they log in to the corporate network.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is evaluating its security model. The CISO wants to move from a model that trusts users based on their network location to one that verifies every access request. Which model should the CISO adopt?

   • AZero Trust
   • BDefense in depth
   • CRisk-based authentication
   • DPerimeter-based security
   Reveal Solution Discussion Select an answer first