最新的Zero Trust Associate認證 ZTCA考試題庫

問題1

Risk within the Zero Trust Exchange is a dynamic value calculated to:

A. Reduce processing load by enabling low-risk traffic to bypass less critical inspections.

B. Give visibility of risky activity and allow enterprises to set acceptable thresholds of risk.

C. Be hashed, truncated, and stored in an obfuscated manner.

D. Provide access to the network.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題2

Verification of user and device identity is to be enabled for:

A. Any person who wants to connect to an enterprise-controlled application, including employees, third parties, and partners.

B. Untrusted third parties only.

C. Remote employees only.

D. Employees connecting from unmanaged endpoint devices only.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題3

Connections to destination applications are the same, regardless of location or function.

A. True

B. False, each application, whether internal or external, trusted or untrusted, must be considered for connectivity based on the risk profile and risk acceptance of each enterprise.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

One example of accessing different types of services based on a differentiator of identity is:

A. Connecting from a browser on an untrusted device versus connecting from a device with a Zscaler Client Connector.

B. Having an open-access VPN policy.

C. Connecting to a LAN wirelessly versus through a wired connection.

D. Relying on a Managed Services Provider (MSP) for day-to-day management of the corporate network.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題5

What is the trend that is increasing security risk through legacy solutions that drive network sprawl?

A. An ongoing dependence on Layer 2 and Layer 3 switching, without consideration for upcoming 5G architectures.

B. A desire to replace edge routers with SD-WAN boxes, which can leverage multiple uplinks for active- active VPN failover.

C. More applications moving to the cloud, users being remote, and VPNs and firewalls extending IP connectivity out to several different locations.

D. A spread-out group of access control lists (ACLs) and firewall rules, with each firewall and VPN appliance only enforcing a subset of the total rule list.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題6

By definition, Zero Trust connections are:

A. Based purely on a network appliance, constrained by how much CPU may be available.

B. Hairpinned through service chaining by an SD-WAN appliance.

C. Highly dependent on the network type, including whether that network is IPv4 or IPv6.

D. Independent of any network for control or trust.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題7

Policy enforcement in Zero Trust is assessed:

A. Only if the risk score is high.

B. For all traffic from the initiating source.

C. For authorized users only.

D. For every access request.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

The only way to deploy inspection is to inspect all traffic. Technically speaking, at an architectural level, there is no way to have exceptions, such as for certain websites or for certain types of applications.

A. False

B. True

正確答案: A

說明：（僅 VCESoft 成員可見）

最新的Zscaler Zero Trust Cyber Associate - ZTCA免費考試真題

最新更新

站內鏈接

聯系我們