What measures are needed to detect and stop malicious access
attempts in real-time and prevent damage when using ZTA's
centralized authentication and policy enforcement?

• A. Dynamic access policies
• B. Dynamic firewall policies
• C. Network segregation
• D. Audit logging and monitoring

Scenario: A multinational org uses ZTA to enhance security. They
collaborate with third-party service providers for remote access to
specific resources. How can ZTA policies authenticate third-party
users and devices for accessing resources?

• A. ZTA policies can implement robust encryption and secure access
  controls to prevent access to services from stolen devices, ensuring
  that only legitimate users can access mobile services.
• B. ZTA policies should prioritize securing remote users through
  technologies like virtual desktop infrastructure (VDI) and corporate
  cloud workstation resources to reduce the risk of lateral movement via
  compromised access controls.
• C. ZTA policies should primarily educate users about secure practices
  and promote strong authentication for services accessed via mobile devices to prevent data compromise.
• D. ZTA policies can be configured to authenticate third-party users
  and their devices, determining the necessary access privileges for
  resources while concealing all other assets to minimize the attack
  surface.

To respond quickly to changes while implementing ZT Strategy, an
organization requires a mindset and culture of

• A. continuous process improvement.
• B. learning and growth.
• C. continuous risk evaluation and policy adjustment.
• D. project governance.

In SaaS and PaaS, which access control method will ZT help define
for access to the features within a service?

• A. Attribute-based access control (ABAC)
• B. Data-based access control (DBAC)
• C. Role-based access control (RBAC)
• D. Privilege-based access control (PBAC)

ZTA utilizes which of the following to improve the network's security posture?

• A. Network communication and micro-segmentation
• B. Micro-segmentation and encryption
• C. Encryption and compliance analytics
• D. Compliance analytics and network communication