MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is the core principle of Zero Trust Security?
a. Trust all users by default
b. Never trust, always verify
c. Only verify new users
d. Trust devices, not users
Answer: b. Never trust, always verifycloudflare+2
Which framework outlines the official guidance for Zero Trust Architecture?
a. NIST 800-207
b. PCI DSS
c. ISO 27001
d. HIPAA
Answer: a. NIST 800-207crowdstrike+2
In Zero Trust, what is the recommended approach for granting access?
a. Full access always
b. Least privilege principle
c. Role-based trust
d. Rotating permissions weekly
Answer: b. Least privilege principleakamai+2
What does Zero Trust Security assume about internal and external threats?
a. Only external attackers exist
b. Both are always present
c. Insiders are always trusted
d. Only internal threats exist
Answer: b. Both are always presentcloudflare+1
Which of these is NOT a key component of Zero Trust?
a. Continuous verification
b. Default trust for network locality
c. Least privilege access
d. Asset monitoring
Answer: b. Default trust for network localitycrowdstrike+1
What is microsegmentation in Zero Trust networking?
a. Segmenting by user roles only
b. Dividing networks into small, isolated zones
c. Sharing the same VLAN across all zones
d. Using one large, flat network
Answer: b. Dividing networks into small, isolated zonesakamai+1
According to Zero Trust, what should be verified for every access attempt?
a. Only device location
b. User identity and device posture
c. Only user role
d. Network speed
Answer: b. User identity and device posturecloudflare+2
Which is a benefit of Zero Trust Security?
a. Reduced need for authentication
b. Decreased data breaches
c. Wider network access for all
d. Removal of firewalls
Answer: b. Decreased data breachescrowdstrike+1
In Zero Trust, what is meant by “blast radius”?
a. Area affected by a network upgrade
b. The number of users in a VLAN
c. The scope of damage in a breach
d. Length of an authentication token
Answer: c. The scope of damage in a breachcrowdstrike
What is the primary reason VPNs are less suitable for Zero Trust?
a. Easy to configure
b. Grant broad network access
c. Expensive to deploy
d. Only support local devices
Answer: b. Grant broad network accessakamai+1
Zero Trust requires which approach towards all devices on the network?
a. Approve all devices automatically
b. Periodically verify device security
c. Only verify new devices
d. Allow unmanaged devices unrestricted access
Answer: b. Periodically verify device securitycloudflare+2
What role does multi-factor authentication (MFA) play in Zero Trust?
a. Lowers user friction only
b. Adds an extra layer of identity verification
c. Replaces passwords
d. Disables device checks
Answer: b. Adds an extra layer of identity verificationincludehelp+2
What is “implicit trust” with respect to network security?
a. Trust based on device status
b. Trust based simply on network location
c. Always trusting third-party vendors
d. Trust based on historical access only
Answer: b. Trust based simply on network locationakamai+2
Which of the following is NOT a Zero Trust best practice?
a. Granting permanent access
b. Continuous monitoring
c. Dynamic policy enforcement
d. Least privilege access controls
Answer: a. Granting permanent accesscloudflare+2
What is the main objective of Zero Trust microsegmentation?
a. Simplify network design
b. Minimize lateral movement
c. Increase broadcast domains
d. Build more data centers
Answer: b. Minimize lateral movementcrowdstrike+2
Which technology is essential for Zero Trust network access (ZTNA)?
a. Flat networks
b. Identity providers (IdP)
c. Only Layer 2 switches
d. Static IP filtering
Answer: b. Identity providers (IdP)scribd+2
What does “never trust, always verify” mean for device access?
a. Trust all devices after initial check
b. Require continuous device attestation
c. No device checks required
d. Only trust known brands
Answer: b. Require continuous device attestationakamai+2
What is the first step in Zero Trust implementation?
a. Installing firewalls
b. Discovering and classifying assets
c. Disabling user access
d. Deploying VLANs
Answer: b. Discovering and classifying assetspaloaltonetworks+2
What does Zero Trust recommend for access to sensitive applications?
a. Broad access for all users
b. Application-level access controls
c. Shared credentials
d. Default trust within site VPN
Answer: b. Application-level access controlscloudflare+1
In Zero Trust, what does continuous authentication involve?
a. One-time sign-in per month
b. Periodic re-validation of users and devices
c. Only validating users at onboarding
d. No re-authentication needed
Answer: b. Periodic re-validation of users and devicescisco+2
What is NOT part of Zero Trust Architecture according to NIST 800-207?
a. Context-based policies
b. Flat network topology
c. Policy enforcement points
d. Dynamic risk assessment
Answer: b. Flat network topologypaloaltonetworks+2
In Zero Trust, what is a “policy enforcement point”?
a. Device used for network segmentation
b. The location where access decisions are enforced
c. A monitoring-only device
d. Data storage node
Answer: b. The location where access decisions are enforcedcrowdstrike+1
Why does Zero Trust avoid broad VLAN access?
a. To increase performance
b. To reduce network complexity
c. To prevent lateral movement
d. To optimize routing
Answer: c. To prevent lateral movementakamai+1
Which protocol can be inspected in a Zero Trust model for threat prevention?
a. Only HTTP
b. Only FTP
c. SSL/TLS
d. Only ICMP
Answer: c. SSL/TLSscribd
What does Zero Trust require before network resources are accessed?
a. No checks
b. Device and user validation
c. Open access for known users
d. Scheduled network scans
Answer: b. Device and user validationcloudflare+2
How does Zero Trust treat requests from inside the network perimeter?
a. Automatically trusted
b. Verified the same as external requests
c. Ignored
d. Prioritized above others
Answer: b. Verified the same as external requestscisco+2
What is the impact of Zero Trust on complexity and scalability?
a. Reduces both
b. May increase upfront complexity but improves scalability
c. No change
d. Only suitable for small networks
Answer: b. May increase upfront complexity but improves scalabilitycisco+2
What is the risk if Zero Trust is not implemented?
a. More secure access
b. Larger blast radius in breaches
c. Reduced authentication requirements
d. Cheaper operations
Answer: b. Larger blast radius in breachescrowdstrike+1
How does Zero Trust help compliance efforts?
a. By automating log deletion
b. By providing detailed monitoring and access records
c. By eliminating the need for audits
d. By bypassing security controls
Answer: b. By providing detailed monitoring and access recordscisco+2
In Zero Trust, who is always considered potentially hostile?
a. Only external users
b. Only contractors
c. Every user and device
d. Only unknown devices
Answer: c. Every user and deviceakamai+2
What should Zero Trust policies do as the environment evolves?
a. Stay static forever
b. Change dynamically
c. Be applied once and forgotten
d. Ignore new threats
Answer: b. Change dynamicallypaloaltonetworks+2
How should least privilege be managed in Zero Trust?
a. By giving maximum permissions
b. By minimizing exposure for each user
c. By using default admin roles
d. By granting guest access
Answer: b. By minimizing exposure for each usercloudflare+2
Which of the following is a challenge in Zero Trust implementation?
a. Lack of monitoring data
b. User resistance
c. Both a and b
d. None of the above
Answer: c. Both a and bhirevire+2
What is the purpose of continuous monitoring in Zero Trust?
a. Track device hardware
b. Detect malicious activity and compliance violations
c. Only for inventory
d. For backup
Answer: b. Detect malicious activity and compliance violationscisco+2
Zero Trust principles can be applied to which environments?
a. Only cloud
b. Only on-premises networks
c. Both cloud and on-premises
d. Only IoT environments
Answer: c. Both cloud and on-premisescrowdstrike+2
Which Zero Trust concept helps reduce “Shadow IT” risk?
a. Ignoring user-installed apps
b. Application discovery and strict access
c. Allowing all third-party apps
d. Trusting developer teams only
Answer: b. Application discovery and strict accessscribd+1
What is the role of device posture assessment in Zero Trust?
a. To profile user productivity
b. To check device health before granting access
c. To speed up authentication
d. To disable controls on mobile devices
Answer: b. To check device health before granting accessakamai+1
How often should Zero Trust policies be reviewed?
a. Rarely
b. Regularly and as new threats emerge
c. Only during audits
d. Never
Answer: b. Regularly and as new threats emergepaloaltonetworks+1
Device and user authentication in Zero Trust should be?
a. Optional
b. Continuous and context-aware
c. Occasional
d. Only performed once
Answer: b. Continuous and context-awarecloudflare+2
Which security control is emphasized in Zero Trust?
a. Network segmentation
b. Open network ports
c. Disabling encryption
d. Promoting implicit trust
Answer: a. Network segmentationakamai+1
What does “context” in Zero Trust access policy refer to?
a. Only user credentials
b. Who, what, when, where, and how
c. Only device type
d. Only network zone
Answer: b. Who, what, when, where, and howscribd+2
Why is traffic encryption important in Zero Trust networks?
a. To comply with regulations
b. To protect data integrity and confidentiality
c. To complicate network setup
d. Only for public Wi-Fi
Answer: b. To protect data integrity and confidentialitycloudflare+1
When are Zero Trust policies enforced?
a. Only at initial login
b. Continuously, at every access attempt
c. Weekly
d. Only on external connections
Answer: b. Continuously, at every access attemptcrowdstrike+2
Which layer does Zero Trust focus on?
a. Only the physical layer
b. All layers, especially application and identity
c. Only data link layer
d. Only transport layer
Answer: b. All layers, especially application and identitycrowdstrike+1
What is one method for checking device compliance in Zero Trust?
a. Inventory only
b. Posture and policy assessment before granting access
c. Trusting based on vendor reputation
d. Default access for mobile devices
Answer: b. Posture and policy assessment before granting accessscribd+2
What does Zero Trust suggest for unmanaged devices?
a. Block or restrict until compliance is met
b. Ignore compliance checks
c. Allow full access
d. Treat them as internal
Answer: a. Block or restrict until compliance is metakamai+1
Zero Trust Security helps to minimize what in case of a breach?
a. Cost of hardware
b. Impact and damage (blast radius)
c. Administrative workload
d. Internet bandwidth
Answer: b. Impact and damage (blast radius)crowdstrike+1
How does Zero Trust support secure remote work?
a. By requiring VPNs only
b. Through endpoint security, adaptive access, and continuous monitoring
c. By limiting access to corporate HQ
d. By granting local admin rights
Answer: b. Through endpoint security, adaptive access, and continuous monitoringhirevire+2
What ensures Zero Trust policies adapt to evolving threats?
a. Static firewalls
b. Dynamic policy engine with analytics
c. Only manual reviews
d. Ignoring alerts
Answer: b. Dynamic policy engine with analyticsakamai+1
What is a key difference between Zero Trust and legacy security models?
a. Zero Trust eliminates encryption
b. Zero Trust always assumes breach, legacy models assume internal safety
c. Legacy models require more authentication
d. Zero Trust uses only perimeter firewalls
Answer: b. Zero Trust always assumes breach, legacy models assume internal safetycloudflare+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info