Question 1

In a Zero Trust architecture, how is the connection to an application provided?

Options :

A : Over any network with per-access control.

B : By establishing a full network-layer connection.

C : Through a virtual security appliance stack.

D : Via secure TLS connections with out-of-band inspection for advanced threats.

Answer: A

Question 2

How is policy enforcement in Zero Trust done?

Options :

A : As a binary decision of allow or block.

B : Without trust, for example Zero Trust.

C : Conditionally, in that an allow or a block will have additional controls assigned, for example Allowand isolate, or Block and Deceive.

D : At the network level, by source IP.

Answer: C

Question 3

What facilitates constant and uniform application of policy enforcement?

Options :

A : Open and clear communication channels across Network and Security teams.

B : The policy remains the same, conditionally, and is applied equally regardless of the location of theenforcement point.

C : Leveraging policy enforcement capabilities available through traditional security appliances.

D : Application access happens on-premises, typically either from within the data center or thecorporate campus, where large security stacks are deployed.

Answer: B

Question 4

A Zero Trust network can be:

Options :

A : Located anywhere.

B : Built on IPv4 or IPv6.

C : Built using VPN concentrators.

D : Located anywhere and built on IPv4 or IPv6.

Answer: D

Question 5

What is a security limitation of traditional firewall/VPN products?

Options :

A : Their IP addresses are published on the internet.

B : SSL-encrypted VPN traffic bypasses security inspection.

C : They cannot be scaled to handle increased load.

D : They rely on easily tampered-with endpoint software.

Answer: B

Free ZTCA Mock Exam – Practice Online Confidently

Buying Options: