1.0

In the Zero Trust model, which of the following components focuses on making decisions about who can access what resources based on policies, identity verification, and threat analysis?

A. Control Plane

B. Implicit trust zones

C. Policy-driven access control

D. Data Plane

A

Which of the following is a part of Zero-Trust Architecture that manages user access based on their roles and responsibilities on the Control Plane?

A. Implicit deny

B. Policy-driven access control

C. Role-based access control

D. Least privilege

B

A21. Which of the following would explain why a company would automatically add a digital signature to each outgoing email message?

A. Confidentiality

B. Integrity

C. Authentication

D. Availability

B

A27. A company would like to examine the credentials of each individual entering the data center building. Which of the following would BEST facilitate this requirement?

A. Access control vestibule

B. Video surveillance

C. Pressure sensors

D. Bollards

A

A64. An organization is implementing a security model where all application requests must be validated at a policy enforcement point. Which of the following would BEST describe this model?

A. Public key infrastructure

B. Zero trust

C. Discretionary access control

D. Federation

B

A83. A user has opened a helpdesk ticket complaining of poor system performance, excessive pop up messages, and the cursor moving without anyone touching the mouse. This issue began after they opened a spreadsheet from a vendor containing part numbers and pricing information. Which of the following is MOST likely the cause of this user's issues?

A. On-path

B. Worm

C. Trojan horse

D. Logic bomb

C

A87. A security administrator has configured a virtual machine in a screened subnet with a guest login account and no password. Which of the following would be the MOST likely reason for this configuration?

A. The server is a honeypot for attracting potential attackers

B. The server is a cloud storage service for remote users

C. The server will be used as a VPN concentrator

D. The server is a development sandbox for third-party programming projects

A

B14. A company is launching a new internal application that will not start until a username and password is entered and a smart card is plugged into the computer. Which of the following BEST describes this process?

A. Federation

B. Accounting

C. Authentication

D. Authorization

C

B36. A company is concerned about security issues at their remote sites. Which of the following would provide the IT team with more information of potential shortcomings?

A. Gap analysis

B. Policy administrator

C. Change management

D. Dependency list

A

B87. When a person enters a data center facility, they must check-in before they are allowed to move further into the building. People who are leaving must be formally checked-out before they are able to exit the building. Which of the following would BEST facilitate this process?

A. Access control vestibule

B. Air gap

C. Pressure sensors

D. Bollards

A

C61. A company is updating components within the control plane of their zero-trust implementation. Which of the following would be part of this update?

A. Policy engine

B. Subjects

C. Policy enforcement point

D. Zone configurations

A

C64. A company would like to automatically monitor and report on any movement occurring in an open field at the data center. Which of the following would be the BEST choice for this task?

A. Bollard

B. Microwave sensor

C. Access control vestibule

D. Fencing

B

C66. A system administrator would like to prove an email message was sent by a specific person. Which of the following describes the verification of this message source?

A. Non-repudiation

B. Key escrow

C. Asymmetric encryption

D. Steganography

A

C82. Visitors to a corporate data center must enter through the main doors of the building. Which of the following security controls would be the BEST choice to successfully guide people to the front door? (Select TWO)

A. Infrared sensors

B. Bollards

C. Biometrics

D. Fencing

E. Access badges

F. Video surveillance

B D