ZTCA 試験問題を無料オンラインアクセス

Zero Trust is about controlling initiator access. This is based on validating the identity of the user, and that is the sole attribute used to control access.

• A.True
• B.False

How is risky behavior controlled in a Zero Trust architecture?

• A.Permanent quarantining of devices in a particular VLAN.
• B.Logging violations in a public database.
• C.Deploying best-in-class security appliances.
• D.Re-categorization of an initiator, and their organization, so that subsequent access requests are limited, deceived, or stopped.

Zero Trust access can work over any type of network.

• A.True
• B.False

What is the security risk inherent in creating a split tunnel VPN, where some traffic is routed over the VPN tunnel and the rest over a direct internet connection?

• A.The VPN traffic is exempted from any security policies configured on the direct internet uplink router or appliance.
• B.A split ACL list, which means only half the rules will be enforced.
• C.You no longer have the visibility required to make decisions on those traffic flows that are going directly out to the internet.
• D.An issue between the built-in client VPN agent on most modern operating systems and a third-party VPN gateway upstream.

How is policy enforcement in Zero Trust done?

• A.At the network level, by source IP.
• B.Conditionally, in that an allow or a block will have additional controls assigned, for example Allow and isolate, or Block and Deceive.
• C.Without trust, for example Zero Trust.
• D.As a binary decision of allow or block.