CCZT問題集、Cloud Security Alliance実際の試験問題

質問 1

What should an organization's data and asset classification be based on?

A. History of data

B. Recovery of data

C. Sensitivity of data

D. Location of data

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

During ZT planning, which of the following determines the scope of
the target state definition? Select the best answer.

A. Service level agreements

B. Risk register

C. Risk appetite

D. Risk assessment

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

What is a server exploitation threat that SDP features (server isolation, single packet authorization [SPA], and dynamic drop-all firewalls) protect against?

A. Domain name system (DNS) poisoning attacks

B. Phishing attacks

C. Denial of service (DoS)/distributed denial of service (DDoS) attacks

D. Certificate forgery attacks

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which approach to ZTA strongly emphasizes proper governance of
access privileges and entitlements for specific assets?

A. ZTA using enhanced identity governance

B. ZTA using network infrastructure and SDPs

C. ZTA using device application sandboxing

D. ZTA using micro-segmentation

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Network architects should consider__________ before selecting an SDP model.
Select the best answer.

A. cost

B. gateways

C. their use case

D. leadership buy-in

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

In a continual improvement model, who maintains the ZT policies?

A. System administrators

B. Server administrators

C. Policy administrators

D. ZT administrators

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

In a ZTA, what is a key difference between a policy decision point
(PDP) and a policy enforcement point (PEP)?

A. A PDP measures incoming control plane authentication signals. A
PEP measures incoming data plane authorization signals.

B. A PDP measures incoming signals in an untrusted zone. A PEP
measures incoming signals in an implicit trust zone.

C. A PDP measures incoming signals against a set of access
determination criteria. A PEP uses incoming signals to open or close a
connection.

D. A PDP measures incoming signals and makes dynamic risk
determinations. A PEP uses incoming signals to make static risk
determinations.

正解: C

解説: (PassTest メンバーにのみ表示されます)

Cloud Security Alliance Certificate of Competence in Zero Trust (CCZT) - CCZT 模擬練習