1.3 Explain the Concept of Zero Trust and Define Its Key Principles CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   Which activity is an example of continuous validation in a Zero Trust architecture?

   • APerforming a full security audit once a year
   • BRe-evaluating a user's access rights when their device's security posture changes
   • CChecking a user's group membership only at the time of account creation
   • DGranting access to all resources after a single successful login
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is designing its network architecture. The security team wants to ensure that if an attacker compromises one server, they cannot easily access other servers. Which design choice best reflects the principle of breach assumption?

   • AUse a single firewall to protect all servers from the internet.
   • BApply patches to all servers regularly.
   • CSegment the network into isolated zones with strict access controls between them.
   • DPlace all servers on the same flat network for easier management.
   Reveal Solution Discussion Select an answer first