007_Zero Trust - CompTIA Security+ SY0-701 - 1.2

What is required each time access to a resource is requested in a zero trust architecture?

• A password reset

• Authentication or proof of identity

• A network scan

• A firewall update

What is a practical approach to implementing zero trust?

• Increasing the number of firewalls

• Breaking security devices into smaller components

• Reducing the number of security policies

• Allowing free movement within the network

Which of the following is a security control mentioned in the zero trust model?

• Data encryption

• Password sharing

• Open access

• Network expansion

What is the role of firewalls in zero trust architecture?

• To allow unrestricted access

• To process frames, packets, and network data

• To store user data

• To manage user accounts

What does zero trust architecture require for every device, process, and user on the network?

• Default access

• Multi-factor authentication

• Unlimited permissions

• No encryption

What is the purpose of network address translation (NAT) in the data plane?

• To encrypt data

• To translate network addresses

• To store user credentials

• To manage user sessions

What is the role of switches in the data plane?

• To manage user accounts

• To process frames and packets

• To store data

• To encrypt information

Which of the following is an example of a security zone?

• Internal network

• Untrusted zone

• Data storage zone

• User interface zone

What does the data plane manage on a physical switch?

• Configuration settings

• Traffic forwarding

• User authentication

• Data encryption

What is the role of a Policy Enforcement Point (PEP)?

• Analyzes authentication requests

• Acts as a gatekeeper, evaluating all traffic

• Issues access tokens

• Relays decisions from PDP to PEP