Good CCZT Exam Dumps Save Your Preparation Time

Page 1 of 2

1. For ZTA, what should be used to validate the identity of an entity?

Password management system

Multifactor authentication

Single sign-on

Bio-metric authentication

2. In a ZTA, automation and orchestration can increase security by using the following means:

Kubernetes and docker

Static application security testing (SAST) and dynamic application security testing (DAST)

Data loss prevention (DLP) and cloud security access broker (CASB)

Infrastructure as code (laC) and identity lifecycle management

3. Of the following options, which risk/threat does SDP mitigate by mandating micro-segmentation and implementing least privilege?

Identification and authentication failures

Injection

Security logging and monitoring failures

Broken access control

4. Which of the following is a key principle of ZT and is required for its implementation?

Implementing strong anti-phishing email filters

Making no assumptions about an entity's trustworthiness when it requests access to a resource

Encrypting all communications between any two endpoints

Requiring that authentication and explicit authorization must occur after network access has been granted

5. The following list describes the SDP onboarding process/procedure.

What is the third step? 1. SDP controllers are brought online first. 2. Accepting hosts are enlisted as SDP gateways that connect to and authenticate with the SDP controller. 3.

Initiating hosts are then onboarded and authenticated by the SDP gateway

Clients on the initiating hosts are then onboarded and authenticated by the SDP controller

SDP gateway is brought online

Finally, SDP controllers are then brought online

6. Scenario: An organization is conducting a gap analysis as a part of its ZT planning. During which of the following steps will risk appetite be defined?

Create a roadmap

Determine the target state

Determine the current state

Define requirements

7. To ensure an acceptable user experience when implementing SDP, a security architect should collaborate with IT to do what?

Plan to release SDP as part of a single major change or a "big-bang" implementation.

Model and plan the user experience, client software distribution, and device onboarding processes.

Build the business case for SDP, based on cost modeling and business value.

Advise IT stakeholders that the security team will fully manage all aspects of the SDP rollout.

8. Of the following, which option is a prerequisite action to understand the organization's protect surface clearly?

Data and asset classification

Threat intelligence capability and monitoring

Gap analysis of the organization's threat landscape

To have the latest risk register for controls implementation

9. How can device impersonation attacks be effectively prevented in a ZTA?

Strict access control

Micro-segmentation

Organizational asset management

Single packet authorization (SPA)

10. Which of the following is a common activity in the scope, priority, and business case steps of ZT planning?

Determine the organization's current state

Prioritize protect surfaces

Develop a target architecture

Identify business and service owners

Page 2 of 2

11. In a ZTA, the logical combination of both the policy engine (PE) and policy administrator (PA) is called

policy decision point (PDP)

role-based access

policy enforcement point (PEP)

data access policy

12. ZTA reduces management overhead by applying a consistent access model throughout the environment for all assets.

What can be said about ZTA models in terms of access decisions?

The traffic of the access workflow must contain all the parameters for the policy decision points.

The traffic of the access workflow must contain all the parameters for the policy enforcement points.

Each access request is handled just-in-time by the policy decision points.

Access revocation data will be passed from the policy decision points to the policy enforcement points.

13. Which component in a ZTA is responsible for deciding whether to grant access to a resource?

The policy enforcement point (PEP)

The policy administrator (PA)

The policy engine (PE)

The policy component

14. At which layer of the open systems interconnection (OSI) model does network access control (NAC) typically operate? Select the best answer.

Layer 6, the presentation layer

Layer 2, the data link layer

Layer 3, the network layer

Layer 4, the transport layer

15. When preparing to implement ZTA, some changes may be required.

Which of the following components should the organization consider as part of their checklist to ensure a successful implementation?

Vulnerability scanning, patch management, change management, and problem management

Organization's governance, compliance, risk management, and operations

Incident management, business continuity planning (BCP), disaster recovery (DR), and training and awareness programs

Visibility and analytics integration and services accessed using mobile devices

16. Which activity of the ZT implementation preparation phase ensures the resiliency of the organization's operations in the event of disruption?

Change management process

Business continuity and disaster recovery

Visibility and analytics

Compliance

17. Which of the following is a required concept of single packet authorizations (SPAs)?

An SPA packet must be digitally signed and authenticated.

An SPA packet must self-contain all necessary information.

An SPA header is encrypted and thus trustworthy.

Upon receiving an SPA, a server must respond to establish secure connectivity.

18. What is one of the key purposes of leveraging visibility & analytics capabilities in a ZTA?

Automatically granting access to all requested applications and data.

Ensuring device compatibility with legacy applications.

Enhancing network performance for faster data access.

Continually evaluating user behavior against a baseline to identify unusual actions.

[email protected]

Mon - Sat 9:00am - 6:00pm

Good CCZT Exam Dumps Save Your Preparation Time

Related

Posts

About Us

EMAIL

Services

Opening Hours