Online Access Free ZTCA Practice Test

When connecting to internal applications, something that you manage, what is the right way to implement Zero Trust for inbound connections?

• A.Allow direct access for on-site initiators and enforce authorization for remote connections.
• B.Only allow connections via a secure point-to-point VPN connection.
• C.Direct access to internal applications must never be allowed. Furthermore, internal applications should never be exposed to any untrusted initiator and thus must be dark. Only authorized users can connect.
• D.Allow direct access for connections from enterprise-managed devices and enforce authorization for unmanaged devices, on-site or remote.

Cloud infrastructure security posture, as well as cloud infrastructure user entitlements, can help contribute to a determination of connection risk; these are typically determined via:

• A.API integrations between the Zero Trust platform and the major cloud providers.
• B.Automated DevOps pipelines.
• C.Premium cloud provider subscriptions.
• D.Multi-factor authentication.

Zero Trust access can work over any type of network.

• A.True
• B.False

Content inspection of encrypted content at scale is widely available on most network-based security platforms, such as firewalls, to deploy.

• A.True
• B.False

What protects Personally Identifiable Information (PII) accidentally shared by a colleague to the entire company?

• A.SSL/TLS inspection.
• B.Data Loss Prevention (out-of-band and inline).
• C.Verifying identity and context through a secure identity provider.
• D.Virtual firewalls.