最新的Zscaler ZTCA免費考試真題

問題1

Identity is a binary decision, not to be revisited. Once a decision is made about who, what, and where, that is final for at least 48 hours.

A. False

B. True

正確答案: A

說明：（僅 Fast2test 成員可見）

問題2

Why should an enterprise categorize applications as part of its secure digital transformation to a Zero Trust architecture?

A. To build structured naming conventions for applications, for example Country:City:Location:Function.

B. So that these can be stored in a CMDB (Configuration Management Database) system, which can be used as a policy enforcement plane for application traffic.

C. To know which ACLs to set on their firewall.

D. To differentiate destination applications from each other, thus enabling the deployment of granular control from valid initiator to valid destination application.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

A Zero Trust network can be:

A. Located anywhere.

B. Located anywhere and built on IPv4 or IPv6.

C. Built on IPv4 or IPv6.

D. Built using VPN concentrators.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

How is risky behavior controlled in a Zero Trust architecture?

A. Deploying best-in-class security appliances.

B. Re-categorization of an initiator, and their organization, so that subsequent access requests are limited, deceived, or stopped.

C. Permanent quarantining of devices in a particular VLAN.

D. Logging violations in a public database.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題5

Sometimes authorized and allowed initiators may request malicious access to services. What would be the best policy enforcement for an enterprise?

A. Conditionally allow access and have a resource from Network Security review based on logs later.

B. Allow access only during business hours.

C. Conditionally block (Deceive).

D. Allow untethered access.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

Where is it most effective to assess the content of a connection?

A. Within an ISP's fiber backbone.

B. Within a data center deployed in a one-armed concentrator mode.

C. At the policy enforcement point, as close to an initiator as possible, for example the closest edge.

D. On disk, after first being copied several times for a backup.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

To effectively access any external SaaS application managed by others, one must be securely connected through:

A. No means; the only access possible is via a special daemon running within the application space of the SaaS application itself.

B. A hardwired network connection.

C. A perimeter-based stateful network firewall, such as a security appliance.

D. A dynamic and effective path, ensuring beneficial experience and performance for the initiator.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題8

How is policy enforcement in Zero Trust done?

A. As a binary decision of allow or block.

B. Conditionally, in that an allow or a block will have additional controls assigned, for example Allow and isolate, or Block and Deceive.

C. Without trust, for example Zero Trust.

D. At the network level, by source IP.

正確答案: B

說明：（僅 Fast2test 成員可見）

最新的Zscaler Zero Trust Cyber Associate - ZTCA免費考試真題

聯系我們

站內鏈接

最新更新