How can device impersonation attacks be effectively prevented in a ZTA?

Single packet authorization (SPA)

Organizational asset management

Single packet authorization (SPA)

When implementing ZTA, why is it important to collect logs from different log sources?

Collecting logs supports change management, incident management, visibility and analytics.

Collecting logs supports investigations, dashboard creation, and policy adjustments.

Collecting logs supports recording transaction flows, mapping transaction flows, and detecting changes in transaction flows.

Collecting logs supports change management, incident management, visibility and analytics.

Collecting logs supports micro-segmentation, device security, and governance.

When preparing to implement ZTA, some changes may be required.Which of the following components should the organization consider as part of their checklist to ensure a successful implementation?

Organization's governance, compliance, risk management, and operations

Vulnerability scanning, patch management, change management, and problem management

Organization's governance, compliance, risk management, and operations

Incident management, business continuity planning (BCP), disaster recovery (DR), and training and awareness programs

Visibility and analytics integration and services accessed using mobile devices

SDP features, like multi-factor authentication (MFA), mutual transport layer security (mTLS), and device fingerprinting, protect against

domain name system (DNS) poisoning

What is one benefit of the protect surface in a ZTA for an organization implementing controls?

Controls can be moved closer to the asset and minimize risk.

Controls can be implemented at all ingress and egress points of the network and minimize risk.

Controls can be implemented at the perimeter of the network and minimize risk.

Controls can be moved away from the asset and minimize risk.

Controls can be moved closer to the asset and minimize risk.

How can we use ZT to ensure that only legitimate users can access a SaaS or PaaS? Select the best answer.

Configuring the security assertion markup language (SAML) service provider only to accept requests from the designated ZT gateway

Implementing micro-segmentation and mutual Transport Layer Security (mTLS)

Configuring the security assertion markup language (SAML) service provider only to accept requests from the designated ZT gateway

Integrating behavior analysis and geofencing as part of ZT controls

Enforcing multi-factor authentication (MFA) and single-sign on (SSO)

SDP incorporates single-packet authorization (SPA). After successful authentication and authorization, what does the client usually do next? Select the best answer.

Generates an SPA packet and sends it to the controller.

Generates an SPA packet and sends it to the initiating host.

Generates an SPA packet and sends it to the controller.

Generates an SPA packet and sends it to the accepting host.

Generates an SPA packet and sends it to the gateway.

What steps should organizations take to strengthen access requirements and protect their resources from unauthorized access by potential cyber threats?

Understand and identify the data and assets that need to be protected

Identify the relevant architecture capabilities and components that could impact ZT

Implement user-based certificates for authentication

Update controls for assets impacted by ZT

How can ZTA planning improve the developer experience?

Streamlining access provisioning to deployment environments.

Require deployments to be grouped into quarterly batches.

Use of a third-party tool for continuous integration/continuous deployment (CI/CD) and deployments.

Disallowing DevOps teams access to the pipeline or deployments.

At which layer of the open systems interconnection (OSI) model does network access control (NAC) typically operate? Select the best answer.

Layer 6, the presentation layer

Optimal compliance posture is mainly achieved through two key ZTfeatures:_____ and_____

(1) Never trusting (2) Reducing the attack surface

(1) Principle of least privilege (2) Verifying remote access connections

(1) Discovery (2) Mapping access controls and network assets

(1) Authentication (2) Authorization of all networked assets

(1) Never trusting (2) Reducing the attack surface

Which architectural consideration needs to be taken into account while deploying SDP? Select the best answer.

How SDP deployment fits into existing network topologies and technologies.

How SDP deployment fits into external vendor assessment.

How SDP deployment fits into existing human resource management systems.

How SDP deployment fits into application validation.

When kicking off ZT planning, what is the first step for an organization in defining priorities?

Identifying the data and assets

In a ZTA, what is a key difference between a policy decision point(PDP) and a policy enforcement point (PEP)?

A PDP measures incoming signals against a set of access determination criteria. A PEP uses incoming signals to open or close a connection.

A PDP measures incoming signals and makes dynamic risk determinations. A PEP uses incoming signals to make static risk determinations.

A PDP measures incoming control plane authentication signals. A PEP measures incoming data plane authorization signals.

A PDP measures incoming signals in an untrusted zone. A PEP measures incoming signals in an implicit trust zone.

In a ZTA, automation and orchestration can increase security by using the following means:

Infrastructure as code (laC) and identity lifecycle management

Static application security testing (SAST) and dynamic application security testing (DAST)

Data loss prevention (DLP) and cloud security access broker (CASB)

Infrastructure as code (laC) and identity lifecycle management

CSA - Cloud Security Alliance CCZT Practice Test 2 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

CSA - Cloud Security Alliance CCZT Practice Test 2

Question

CSA - Cloud Security Alliance CCZT Practice Tests

Practice Tests