01
True or false
1 point
True or false: In a zero-trust approach, being connected to an organization’s internal network is by itself sufficient reason to trust an access request.
Free Practice Quiz Question List
5 Zero Trust Security Online Quiz Questions
Use this free practice quiz with 20 questions to review 5 Zero Trust Security, test your knowledge, and prepare for your next test or exam.
20 questions
02
True or false
1 point
True or false: Continuous verification necessarily means prompting a user to re-enter a password constantly during a session.
- A
True
- B
False
03
Choose one
1 point
A request to view a sensitive application comes from an employee’s laptop. Which access decision best follows zero-trust principles?
- A
The request comes from an internal subnet, so allow it without further checks.
- B
Assess the user or service identity, device condition, requested resource, and relevant context before deciding.
- C
Allow the request if the device is company-owned, regardless of its security condition or requested resource.
04
Choose one
1 point
In a common zero-trust architecture, which function is responsible for evaluating evidence and determining whether access should be allowed?
- A
The policy engine evaluates evidence and decides whether to allow access.
- B
The policy administrator independently decides whether access should be allowed.
- C
The policy enforcement point determines the organization’s access policy.
05
Choose one
1 point
A company wants remote employees to reach only the applications they are authorized to use, rather than giving them broad internal-network access. Which implementation pattern best fits this goal?
- A
It grants broad access to the internal network once a user is authenticated.
- B
It replaces identity checks with rules based only on subnet location.
- C
It routes a user to an authorized application after evaluating identity and, where available, other context.
06
Fill in the blank
1 point
Complete the zero-trust shorthand: explicitly, grant , and that a resource or network may be compromised.
07
Fill in the blank
1 point
Complete the role descriptions in a common zero-trust architecture: The evaluates evidence and decides whether access is allowed; the carries out that decision; and the controls the connection to the resource.
08
Choose all
1 point
Which two kinds of information can appropriately contribute to a zero-trust access decision? Select all correct answers.
- A
Whether the device is managed, patched, encrypted, and compliant
- B
Whether the request originates inside the organization’s network, treated as sufficient proof of trust
- C
The identity, role, and requested permissions of the user or service
- D
Whether the device is company-owned, treated as sufficient proof of trust regardless of its condition
09
Choose all
1 point
Which two statements accurately describe segmentation in a zero-trust approach? Select all correct answers.
- A
Microsegmentation can restrict communication between individual workloads or services.
- B
Segmentation removes the need to evaluate identity and request context.
- C
Segmentation can reduce lateral movement by limiting automatically reachable resources.
- D
Any service in the same network zone should be trusted without further checks.
10
Written response
1 point
What is the term for establishing who or what is making an access request?
11
Written response
1 point
What is the term for applying fine-grained communication rules between individual workloads, applications, or services?
12
Open ended
1 point
A verified employee requests access to a sensitive project site from a company-owned laptop, but the laptop is not currently reporting whether it is patched or compliant. Explain how a zero-trust system should handle this request and what it could do if new risk evidence appears during the session.
13
Choose one
1 point
An employee requests access to a sensitive application from the company network. Which approach best reflects zero trust?
- A
Allow the request because it originates on the internal network.
- B
Evaluate the request using identity, device condition, resource, and relevant context.
- C
Allow the request if the user has accessed the resource before.
- D
Block all requests from outside the organization.
14
True or false
1 point
In zero trust, continuous verification necessarily means asking the user to re-enter a password constantly.
- A
True
- B
False
15
Choose one
1 point
A verified employee is viewing a project site on a managed laptop, but the laptop becomes noncompliant during the session. What is the most appropriate zero-trust response?
- A
Keep access unchanged because the employee already authenticated.
- B
Treat the managed device’s network location as sufficient proof of trust.
- C
Reassess the request or session using the device’s changed compliance status.
- D
Grant access to all company resources so work can continue.
16
Written response
1 point
What zero-trust principle calls for granting only the access needed, and only for as long as it is needed?
17
Choose one
1 point
In a common zero-trust architecture, which statement correctly describes the policy engine’s role?
- A
The policy engine evaluates evidence and determines whether access should be allowed.
- B
The policy administrator evaluates evidence and controls the resource connection.
- C
The policy enforcement point defines organizational policy and inventories devices.
- D
The policy engine only records activity after access has been granted.
18
Written response
1 point
What is the term for determining what an authenticated user, application, or service is permitted to do?
19
Choose one
1 point
A compromised workload should have as few automatically reachable services as possible. Which control most directly supports this goal?
- A
Give every workload broad network access, then monitor for suspicious activity.
- B
Apply narrowly scoped communication rules between individual workloads or services.
- C
Replace identity checks with subnet-based trust decisions.
- D
Separate users by department while allowing unrestricted traffic within each department.
20
Choose one
1 point
An organization wants remote employees to reach approved applications without granting broad access to its internal network. Which implementation pattern best fits?
- A
A device posture check that reports whether an endpoint meets requirements.
- B
A service-to-service identity that authenticates workloads.
- C
An identity-aware access proxy or ZTNA that connects a user to an authorized application.
- D
A traditional network boundary that trusts all traffic once it enters.