최신Zscaler Zero Trust Cyber Associate - ZTCA무료샘플문제

A. Who is connecting.

B. ML-based application discovery as part of a microsegmentation implementation.

C. Integration with third-party threat intelligence feeds.

D. Device posture-based determinations of quarantine.

A. A full PCAP of the inline data transfer.

B. A backup and restore configuration process, run manually during a change window.

C. An ML/AI-driven engine analyzing and determining application segments after wildcard domains are established.

D. Categories, criteria, and insights pertaining to each access request.

A. The enterprise security architecture team should create a standard formula to calculate a fixed risk score for each unique initiator based on previous security incidents.

B. A Zero Trust certification process, whereby every employee at the company is Zero Trust certified.

C. A dynamic risk score, which feeds into a decision engine that determines whether access should be granted.

D. Industry analyst firms such as Gartner and Forrester should provide the best guidance.

A. Only focused on initiator context.

B. An assessment of inline and out-of-band network traffic.

C. An assessment of the content, not just the connection, of services, so that malicious functions are not downloaded and protected information is not lost.

D. A review of known configuration, and the absence of other configuration details, of cloud-hosted services in relation to best practices, industry standards, and compliance models to ensure misconfigurations, issues, and vulnerabilities are understood and highlighted.

A. No. It should only apply to unauthorized initiators.

B. Zero Trust allows all initiators to see the destination, regardless of role and responsibility.

C. Unauthorized initiators are blackholed by default.

D. A true Zero Trust solution must never allow any access without authorization.

A. The setup of an enterprise SSO or AD server for credential validation.

B. A handshake between the initiator and destination application.

C. Verification of identity and context of the connection.

D. Connecting an initiator to internal and external applications from the Zero Trust Exchange.

A. SCIM, leveraging an IdP.

B. The unique and definitive implementation of control, solely for that access request.

C. Placing virtual firewall images in every public cloud you are deployed in.

D. Access control delivered via authentication, authorization, and accounting through a protocol such as RADIUS.

A. Rethink its security posture, leveraging local breakouts from branch sites so that user traffic is filtered through a secure web gateway.

B. Engage in double-extortion negotiations.

C. Create various policy tiers, including several quarantine VLANs.

D. Conditionally decide which access request is sent to a decoy service, not the real destination workload, thus allowing security teams insight into questionable activity.