最新のZTCA問題集で試験を準備する

Should a Zero Trust solution inspect traffic for all destinations?

• A. No. Only traffic destined to engineering services and financial applications.
• B. No. Only non-TLS/SSL-based traffic should be inspected.
• C. No. It is important to find a balance. The Zero Trust solution should give the enterprise the ability to implement inspection for any application or destination. Although it is strongly recommended, it is up to the enterprise to decide where inspection is needed.
• D. No. Traffic should never be inspected.

A Zero Trust policy enablement and subsequent application connection should always be permanent.

• A. True
• B. False

Third parties that can be integrated at the point of Verifying Identity and Context in the Zero Trust process include:

• A. Data center providers such as Equinix, where customer hardware is typically hosted.
• B. Web scalers such as GCP, Azure, and AWS, where cloud workloads are typically hosted.
• C. Open-source SIEM tools such as OSSM and the ELK Stack.
• D. IdPs (Identity Providers) such as Okta and PingFederate, which are used for SSO (Single Sign-On).

Assessing risk is:

• A. An ongoing process to verify publicly known bad actor IP addresses.
• B. An assessment of all things related to the current connection, previous context, and considered on an ongoing basis for future requests, thus allowing for unique and dynamic changes in the consideration of risk.
• C. Universal control across the entire enterprise. Once assessed, risk applies to all traffic from that enterprise.
• D. A non-recurring process to determine how to treat requests from a specific initiator for the next 30 days.

Zero Trust is about controlling initiator access. This is based on validating the identity of the user, and that is the sole attribute used to control access.

• A. True
• B. False