1.5 Implement Continuous Monitoring and Analytics of Zero Trust Environment NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What type of data is essential for continuous monitoring to detect network-based threats?

   • ANetwork flow data
   • BSoftware license keys
   • CEmployee HR records
   • DBuilding access logs
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   How do analytics in a zero trust environment detect policy violations?

   • ABy encrypting all data stored in the cloud
   • BBy requiring all users to re-authenticate every hour
   • CBy blocking all traffic that originates from outside the corporate network
   • DBy comparing observed behavior against established baselines and policy rules
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A manufacturing company is implementing continuous monitoring for its zero trust environment. The security team wants to detect insider threats, such as an employee accessing files outside of their normal working hours or downloading large volumes of data. Which combination of telemetry sources would provide the most comprehensive visibility for this use case?

   • ADNS logs and email gateway logs only
   • BNetwork flow logs and firewall logs only
   • CUser activity logs, file access logs, and data loss prevention (DLP) alerts
   • DEndpoint antivirus alerts and patch management reports
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A cloud-native company has adopted a zero trust model and wants to detect anomalous behavior such as a user accessing resources from an unusual geographic location or a service account making an unexpected API call. The company has deployed a monitoring platform that collects logs and telemetry. Which analytics technique is most effective for identifying these types of anomalies?

   • ASignature-based detection using known threat indicators
   • BUser and entity behavior analytics (UEBA) using machine learning
   • CRule-based alerting on static thresholds
   • DManual review of logs by security analysts
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In a zero trust architecture, how do monitoring analytics support device policies?

   • ABy automatically installing all software updates without user consent
   • BBy ignoring device location and focusing only on user identity
   • CBy granting permanent access to devices that have been used for a long time
   • DBy assessing device health and compliance in real time to allow or deny access
   Reveal Solution Discussion Select an answer first