CyberRevision
Continue revision → ← Subjects
Complete networking bank

All 5,000 questions.

Search the curriculum, filter by level, check your saved status, or open any question in revision mode.

0 answered overall

Showing 4,851–4,900 of 5,000 matching questions

50 per page
4851
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-051 in an authorized home-lab assessment evaluates a finance analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4852
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-052 in a university red-team exercise evaluates a database administrator requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4853
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-053 in a hospital SOC investigation evaluates a contractor requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4854
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-054 in an e-commerce incident response case evaluates a SOC analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4855
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-055 in a financial-services penetration test evaluates a developer requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4856
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-056 in a cloud migration threat model evaluates a finance analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4857
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-057 in an industrial network security review evaluates a database administrator requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Always allow because the request originates internally.
  4. Allow the session with least-privilege controls and continuous monitoring.
Practice →
4858
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-058 in a managed-service-provider audit evaluates a contractor requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4859
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-059 in a government zero-trust rollout evaluates a SOC analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4860
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-060 in a multinational enterprise breach simulation evaluates a developer requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow because the request originates internally.
  3. Always allow read-write access after one successful login.
  4. Route around the policy through the default gateway.
Practice →
4861
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-061 in an authorized home-lab assessment evaluates a finance analyst requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4862
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-062 in a university red-team exercise evaluates a database administrator requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4863
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-063 in a hospital SOC investigation evaluates a contractor requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4864
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-064 in an e-commerce incident response case evaluates a SOC analyst requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4865
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-065 in a financial-services penetration test evaluates a developer requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Allow the session with least-privilege controls and continuous monitoring.
Practice →
4866
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-066 in a cloud migration threat model evaluates a finance analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4867
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-067 in an industrial network security review evaluates a database administrator requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4868
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-068 in a managed-service-provider audit evaluates a contractor requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4869
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-069 in a government zero-trust rollout evaluates a SOC analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Allow the session with least-privilege controls and continuous monitoring.
Practice →
4870
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-070 in a multinational enterprise breach simulation evaluates a developer requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4871
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-071 in an authorized home-lab assessment evaluates a finance analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4872
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-072 in a university red-team exercise evaluates a database administrator requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4873
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-073 in a hospital SOC investigation evaluates a contractor requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4874
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-074 in an e-commerce incident response case evaluates a SOC analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4875
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-075 in a financial-services penetration test evaluates a developer requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Always allow because the request originates internally.
Practice →
4876
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-076 in a cloud migration threat model evaluates a finance analyst requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4877
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-077 in an industrial network security review evaluates a database administrator requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Allow the session with least-privilege controls and continuous monitoring.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4878
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-078 in a managed-service-provider audit evaluates a contractor requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4879
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-079 in a government zero-trust rollout evaluates a SOC analyst requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4880
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-080 in a multinational enterprise breach simulation evaluates a developer requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4881
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-081 in an authorized home-lab assessment evaluates a finance analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4882
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-082 in a university red-team exercise evaluates a database administrator requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4883
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-083 in a hospital SOC investigation evaluates a contractor requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4884
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-084 in an e-commerce incident response case evaluates a SOC analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Always allow because the request originates internally.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4885
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-085 in a financial-services penetration test evaluates a developer requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4886
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-086 in a cloud migration threat model evaluates a finance analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4887
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-087 in an industrial network security review evaluates a database administrator requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4888
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-088 in a managed-service-provider audit evaluates a contractor requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Always allow because the request originates internally.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4889
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-089 in a government zero-trust rollout evaluates a SOC analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Allow the session with least-privilege controls and continuous monitoring.
  2. Always allow because the request originates internally.
  3. Always allow read-write access after one successful login.
  4. Route around the policy through the default gateway.
Practice →
4890
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-090 in a multinational enterprise breach simulation evaluates a developer requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Always allow because the request originates internally.
Practice →
4891
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-091 in an authorized home-lab assessment evaluates a finance analyst requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4892
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-092 in a university red-team exercise evaluates a database administrator requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4893
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-093 in a hospital SOC investigation evaluates a contractor requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4894
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-094 in an e-commerce incident response case evaluates a SOC analyst requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4895
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-095 in a financial-services penetration test evaluates a developer requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4896
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-096 in a cloud migration threat model evaluates a finance analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4897
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-097 in an industrial network security review evaluates a database administrator requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4898
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-098 in a managed-service-provider audit evaluates a contractor requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4899
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-099 in a government zero-trust rollout evaluates a SOC analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4900
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-100 in a multinational enterprise breach simulation evaluates a developer requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →