A+ V14 Zero Trust and Least Privilege Concepts

1. A zero trust model requires what for every device accessing resources?

Current antivirus software

Verification of identity and device health

VPN connection only

Corporate network membership

Submit

4. Least privilege is most effective when combined with:

No monitoring or logging

Regular auditing and access reviews

Single factor authentication

Unlimited user permissions

5. Which practice supports zero trust by reducing attack surface?

Granting all users admin rights

Disabling all security features

Implementing microsegmentation

Removing user authentication

6. In least privilege, administrative accounts should be:

Used for daily work tasks

Separate from standard user accounts

Shared among team members

Granted to all senior staff

7. Zero trust architecture assumes which of the following is true?

The network is secure by default

Threats can originate from anywhere

Users are always trustworthy

Encryption prevents all attacks

8. What should happen when a user changes departments?

Their access remains unchanged

They keep old and new access rights

Old access is revoked, new access granted per role

Access review is optional

9. Least privilege access prevents lateral movement by:

Limiting user permissions to assigned resources

Using complex passwords

Encrypting all data

Monitoring network traffic

10. Which is NOT a component of zero trust architecture?

Continuous monitoring and verification

Implicit trust of internal networks

Microsegmentation

Multi-factor authentication

11. What is the core principle of zero trust security?

Trust all internal network traffic automatically

Never trust, always verify every access request

Trust users once they log in with credentials

Trust only encrypted connections

12. In least privilege, when should access rights be reviewed?

Annually during performance reviews

Only when users request changes

Regularly and when roles change

Never, unless a breach occurs

13. What role does identity verification play in zero trust?

Optional after initial login

Foundation for every access decision

Required only for administrative tasks

Performed once per session

14. Which privilege escalation scenario violates least privilege principles?

Admin grants temporary elevated access for a specific task

User retains admin rights permanently after initial setup

Admin approves elevated access with time limits

Sudo commands require password authentication

15. Zero trust assumes the perimeter is no longer a security boundary. What replaces it?

Firewalls at every access point

Continuous verification of every access request

Air-gapped networks

VPN-only access

16. A user should have access to files needed for their role and nothing more. This describes:

Defense in depth

Least privilege access

Network segmentation

Data encryption

17. Which authentication method best supports zero trust principles?

Single sign-on with one password

Multi-factor authentication

IP address whitelisting

Username and password only

18. What is the primary benefit of implementing least privilege?

Reduces help desk ticket volume

Minimizes damage from compromised accounts

Eliminates the need for firewalls

Simplifies user onboarding

19. In zero trust architecture, continuous verification is required because:

Users change roles frequently

Threats can emerge at any point in a session

Networks are inherently insecure

Passwords expire regularly

20. Which concept restricts user access to only the resources required for job functions?

Role-based access control

Least privilege principle