ZTCA Practice Questions

A.  

Inspection of SSL/TLS connections.

B.  

Local breakout so that traffic goes directly to SaaS applications from branches.

C.  

Context and Identity.

D.  

Segmenting an OT network so that it is air-gapped from the IT environment.

A.  

At the policy enforcement point, as close to an initiator as possible, for example the closest edge.

B.  

Within a data center deployed in a one-armed concentrator mode.

C.  

On disk, after first being copied several times for a backup.

D.  

Within an ISP’s fiber backbone.

A.  

Connecting an initiator to internal and external applications from the Zero Trust Exchange.

B.  

A handshake between the initiator and destination application.

C.  

The setup of an enterprise SSO or AD server for credential validation.

D.  

Verification of identity and context of the connection.

A.  

Yes.

B.  

No.

A.  

Open and clear communication channels across Network and Security teams.

B.  

The policy remains the same, conditionally, and is applied equally regardless of the location of the enforcement point.

C.  

Leveraging policy enforcement capabilities available through traditional security appliances.

D.  

Application access happens on-premises, typically either from within the data center or the corporate campus, where large security stacks are deployed.

A.  

Automated DevOps pipelines.

B.  

API integrations between the Zero Trust platform and the major cloud providers.

C.  

Multi-factor authentication.

D.  

Premium cloud provider subscriptions.

A.  

Networks get extended using VPNs.

B.  

Users simply need a reliable Wi-Fi connection.

C.  

Work from outside the network is not possible.

D.  

A single sign-on solution can be leveraged to accomplish this.

A.  

Their IP addresses are published on the internet.

B.  

SSL-encrypted VPN traffic bypasses security inspection.

C.  

They cannot be scaled to handle increased load.

D.  

They rely on easily tampered-with endpoint software.

A.  

Network access to all available applications.

B.  

Blocking access to applications and the network.

C.  

Granular access from the verified initiator only to the verified application, under the correct risk and content controls.

D.  

Forwarding traffic on to a virtual DMZ.

A.  

True

B.  

False