Certificate of Competence in Zero Trust (CCZT) (CCZT) Free Practice Test

Question 1

Scenario: As a ZTA security administrator, you aim to enforce the
principle of least privilege for private cloud network access. Which
ZTA policy entity is mainly responsible for crafting and maintaining
these policies?

A. Policy administrator (PA)

B. Policy decision point (PDP)

C. Policy enforcement point (PEP)

D. Gateway enforcing access policies

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Of the following options, which risk/threat does SDP mitigate by
mandating micro-segmentation and implementing least privilege?

A. Identification and authentication failures

B. Injection

C. Broken access control

D. Security logging and monitoring failures

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which of the following is a key principle of ZT and is required for its implementation?

A. Implementing strong anti-phishing email filters

B. Making no assumptions about an entity's trustworthiness when it
requests access to a resource

C. Encrypting all communications between any two endpoints

D. Requiring that authentication and explicit authorization must occur after network access has been granted

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What should be a key component of any ZT project, especially
during implementation and adjustments?

A. Frequent technology changes

B. Proper risk management

C. Extensive task monitoring

D. Frequent policy audits

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

When implementing ZTA, why is it important to collect logs from
different log sources?

A. Collecting logs supports change management, incident
management, visibility and analytics.

B. Collecting logs supports recording transaction flows, mapping
transaction flows, and detecting changes in transaction flows.

C. Collecting logs supports investigations, dashboard creation, and
policy adjustments.

D. Collecting logs supports micro-segmentation, device security, and governance.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

In a ZTA, automation and orchestration can increase security by
using the following means:

A. Data loss prevention (DLP) and cloud security access broker (CASB)

B. Kubernetes and docker

C. Infrastructure as code (laC) and identity lifecycle management

D. Static application security testing (SAST) and dynamic application
security testing (DAST)

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

In SaaS and PaaS, which access control method will ZT help define
for access to the features within a service?

A. Attribute-based access control (ABAC)

B. Privilege-based access control (PBAC)

C. Role-based access control (RBAC)

D. Data-based access control (DBAC)

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cloud Security Alliance Certificate of Competence in Zero Trust (CCZT) (CCZT) Free Practice Test