EMC Zero Trust Design 2023 Sample Questions:

1. What is an essential step in creating an identity-based Zero Trust strategy?

A) Eliminating the use of encryption to streamline the authentication process
B) Limiting the use of multifactor authentication to only the most sensitive systems
C) Allowing users to define their access levels based on personal preference
D) Defining and enforcing a policy that requires strong authentication measures for every access request

2. What are significant factors in assessing the impact of Zero Trust implementation?
(Select two)

A) The CEO's personal preferences
B) Organizational culture and readiness for change
C) Existing IT and security architectures
D) Current geopolitical climate

3. Which pillar focuses on identification, authentication, and access control policies in a Zero Trust infrastructure?

A) Network and Environment
B) Automation and Orchestration
C) User
D) Data

4. To sign in to input constrained device an end user uses device authorization technique for authorization. Arrange the device authorization steps in correct sequence.

A) 1. The authorization server authenticates the client and if valid, issues an access token.
2. The resource server validates the access token, and if valid, serves the request.
3. The client requests authorization from the resource owner.
4. The client receives an authorization grant and requests an access token with the authorization server.
5. The client requests the protected resource from the resource server and authenticates by presenting the access token.
B) 1. The resource server validates the access token, and if valid, serves the request.
2. The client requests the protected resource from the resource server and authenticates by presenting the access token.
3. The client requests authorization from the resource owner.
4. The client receives an authorization grant and requests an access token with the authorization server.
5. The authorization server authenticates the client and if valid, issues an access token.
C) 1. The resource server validates the access token, and if valid, serves the request.
2. The client requests authorization from the resource owner.
3. The client requests the protected resource from the resource server and authenticates by presenting the access token.
4. The client receives an authorization grant and requests an access token with the authorization server.
5. The authorization server authenticates the client and if valid, issues an access token.
D) 1. The authorization server authenticates the client and if valid, issues an access token.
2. The client receives an authorization grant and requests an access token with the authorization server.
3. The resource server validates the access token, and if valid, serves the request.
4. The client requests the protected resource from the resource server and authenticates by presenting the access token.
5. The client requests authorization from the resource owner.

5. How should changes in user roles be handled in an identity-based Zero Trust framework?
User roles should remain static to maintain simplicity in access management.

A) Users should request access through a manual process each time their role changes.
B) Access rights should be dynamically adjusted to reflect changes in user roles and responsibilities.
C) Role changes should be ignored to avoid administrative overhead.

Solutions: