Free D-ZT-DS-01 – Zero Trust Design v2 Practice Test Question

Select an option, then click Submit answer.

• ○ Never trust, always verify access
• ○ Trust internal network users
• ○ Verify once at perimeter only
• ○ Trust devices by default

Select an option, then click Submit answer.

• ○ NIST SP 800-53 only
• ○ NIST SP 800-207
• ○ NIST SP 1800-1
• ○ NIST CSF only

Select an option, then click Submit answer.

• ○ Internal traffic needs no encryption
• ○ Access granted permanently per segment
• ○ All communication secured regardless of location
• ○ Devices are trusted after first login

Select an option, then click Submit answer.

• ○ Servers, Storage, Switches, Cables, Power
• ○ People, Process, Paperwork, Policy, Price
• ○ Cloud, Edge, Core, Branch, Home
• ○ Identity, Devices, Networks, Applications, Data

Select an option, then click Submit answer.

• ○ Design as if attackers inside
• ○ Assume firewalls stop everything
• ○ Skip monitoring investments
• ○ Trust backups without testing

Select an option, then click Submit answer.

• ○ Shared administrator accounts
• ○ Least privilege access
• ○ Flat network design
• ○ Permanent VPN access

Select all that apply, then click Submit answer.

• ○ Per-session access authorization
• ○ Encrypt all communications
• ○ Trust LAN traffic implicitly
• ○ Grant permanent network access

Select all that apply, then click Submit answer.

• ○ Microsegmentation of workloads
• ○ Single flat enterprise network
• ○ Least privilege per resource
• ○ Shared local admin passwords

Select all that apply, then click Submit answer.

• ○ Applications and workloads
• ○ Office furniture
• ○ Paper records
• ○ Data protection controls

Answer is in the explanation below.

Answer is in the explanation below.

Answer is in the explanation below.