1.5 Implement Continuous Monitoring and Analytics of Zero Trust Environment NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of continuous monitoring in a zero trust environment?

   • ATo replace the need for periodic security assessments
   • BTo provide ongoing visibility into security posture and detect changes that may indicate risk
   • CTo automatically block all suspicious traffic without human intervention
   • DTo ensure all network traffic is encrypted at all times
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A logistics company is implementing continuous monitoring for its zero trust environment. The security team wants to detect unauthorized access attempts to its internal applications and also identify when a user's device does not meet compliance requirements. Which telemetry sources should the team collect to support both use cases?

   • AEmail gateway logs and web proxy logs
   • BNetwork flow logs and firewall logs
   • CVulnerability scan reports and patch management data
   • DAuthentication logs and device compliance status
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security operations team uses an XDR platform to monitor a zero trust environment. They have configured automated response actions for high-confidence threats, such as isolating endpoints and blocking malicious IPs. However, they are concerned that some automated actions may be too aggressive and could impact business operations. Which approach best mitigates this risk while maintaining effective response?

   • AOnly automate response actions for threats that have been manually confirmed
   • BAutomate all possible response actions to ensure rapid containment
   • CDisable all automated response actions and require manual approval for every action
   • DUse a risk-based approach that only automates actions for threats with a high confidence score
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a telemetry source used for continuous monitoring in a zero trust environment?

   • AEmployee satisfaction surveys
   • BVendor marketing materials
   • CHardware warranty information
   • DUser activity logs
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A technology company uses a zero trust architecture and has deployed an XDR platform. The security operations team wants to automatically contain a compromised endpoint by isolating it from the network when a high-confidence threat is detected. Which response action should the team configure in the XDR platform?

   • ASending an email alert to the security team
   • BManual creation of a firewall rule to block the endpoint's IP
   • CScheduling a vulnerability scan on the endpoint
   • DAutomated endpoint isolation
   Reveal Solution Discussion Select an answer first