Online Access Free ZTCA Exam Questions

The only way to deploy inspection is to inspect all traffic. Technically speaking, at an architectural level, there is no way to have exceptions, such as for certain websites or for certain types of applications.

• A.False
• B.True

What protects Personally Identifiable Information (PII) accidentally shared by a colleague to the entire company?

• A.Verifying identity and context through a secure identity provider.
• B.Virtual firewalls.
• C.SSL/TLS inspection.
• D.Data Loss Prevention (out-of-band and inline).

How are services protected in a legacy scenario when they are discoverable on the public Internet? (Select all that apply)

• A.A web application firewall (WAF) for protecting against DDoS and other botnet style attacks.
• B.Dynamic Application Security Testing (DAST).
• C.A large security stack including appliances that handle functions like global load balancing, firewalling, DDoS, and more.
• D.Establishing a DMZ that would include multiple products and services.

Connections to destination applications are the same, regardless of location or function.

• A.False, each application, whether internal or external, trusted or untrusted, must be considered for connectivity based on the risk profile and risk acceptance of each enterprise.
• B.True

A Zero Trust policy enablement and subsequent application connection should always be permanent.

• A.False
• B.True