CyberRevision
Continue revision → ← Subjects
Complete networking bank

All 5,000 questions.

Search the curriculum, filter by level, check your saved status, or open any question in revision mode.

0 answered overall

Showing 4,801–4,850 of 5,000 matching questions

50 per page
4801
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-001 in an authorized home-lab assessment evaluates a finance analyst requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4802
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-002 in a university red-team exercise evaluates a database administrator requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4803
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-003 in a hospital SOC investigation evaluates a contractor requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4804
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-004 in an e-commerce incident response case evaluates a SOC analyst requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4805
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-005 in a financial-services penetration test evaluates a developer requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Allow the session with least-privilege controls and continuous monitoring.
Practice →
4806
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-006 in a cloud migration threat model evaluates a finance analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4807
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-007 in an industrial network security review evaluates a database administrator requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4808
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-008 in a managed-service-provider audit evaluates a contractor requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow because the request originates internally.
  3. Always allow read-write access after one successful login.
  4. Route around the policy through the default gateway.
Practice →
4809
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-009 in a government zero-trust rollout evaluates a SOC analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Always allow because the request originates internally.
  4. Allow the session with least-privilege controls and continuous monitoring.
Practice →
4810
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-010 in a multinational enterprise breach simulation evaluates a developer requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4811
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-011 in an authorized home-lab assessment evaluates a finance analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4812
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-012 in a university red-team exercise evaluates a database administrator requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4813
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-013 in a hospital SOC investigation evaluates a contractor requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4814
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-014 in an e-commerce incident response case evaluates a SOC analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4815
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-015 in a financial-services penetration test evaluates a developer requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4816
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-016 in a cloud migration threat model evaluates a finance analyst requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4817
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-017 in an industrial network security review evaluates a database administrator requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Allow the session with least-privilege controls and continuous monitoring.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4818
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-018 in a managed-service-provider audit evaluates a contractor requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4819
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-019 in a government zero-trust rollout evaluates a SOC analyst requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4820
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-020 in a multinational enterprise breach simulation evaluates a developer requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4821
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-021 in an authorized home-lab assessment evaluates a finance analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4822
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-022 in a university red-team exercise evaluates a database administrator requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Route around the policy through the default gateway.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Always allow because the request originates internally.
  4. Always allow read-write access after one successful login.
Practice →
4823
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-023 in a hospital SOC investigation evaluates a contractor requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4824
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-024 in an e-commerce incident response case evaluates a SOC analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4825
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-025 in a financial-services penetration test evaluates a developer requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4826
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-026 in a cloud migration threat model evaluates a finance analyst requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4827
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-027 in an industrial network security review evaluates a database administrator requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4828
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-028 in a managed-service-provider audit evaluates a contractor requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Always allow because the request originates internally.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4829
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-029 in a government zero-trust rollout evaluates a SOC analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Allow the session with least-privilege controls and continuous monitoring.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4830
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-030 in a multinational enterprise breach simulation evaluates a developer requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4831
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-031 in an authorized home-lab assessment evaluates a finance analyst requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4832
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-032 in a university red-team exercise evaluates a database administrator requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4833
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-033 in a hospital SOC investigation evaluates a contractor requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4834
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-034 in an e-commerce incident response case evaluates a SOC analyst requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4835
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-035 in a financial-services penetration test evaluates a developer requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4836
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-036 in a cloud migration threat model evaluates a finance analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Always allow because the request originates internally.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Route around the policy through the default gateway.
Practice →
4837
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-037 in an industrial network security review evaluates a database administrator requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4838
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-038 in a managed-service-provider audit evaluates a contractor requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow read-write access after one successful login.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow because the request originates internally.
Practice →
4839
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-039 in a government zero-trust rollout evaluates a SOC analyst requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Deny or step up verification because the policy conditions are not all satisfied.
  3. Route around the policy through the default gateway.
  4. Always allow read-write access after one successful login.
Practice →
4840
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-040 in a multinational enterprise breach simulation evaluates a developer requesting source repository: managed device=no, MFA=no, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4841
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-041 in an authorized home-lab assessment evaluates a finance analyst requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4842
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-042 in a university red-team exercise evaluates a database administrator requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4843
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-043 in a hospital SOC investigation evaluates a contractor requesting SIEM console: managed device=yes, MFA=no, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →
4844
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-044 in an e-commerce incident response case evaluates a SOC analyst requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4845
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-045 in a financial-services penetration test evaluates a developer requesting payroll API: managed device=yes, MFA=yes, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Allow the session with least-privilege controls and continuous monitoring.
  2. Always allow because the request originates internally.
  3. Always allow read-write access after one successful login.
  4. Route around the policy through the default gateway.
Practice →
4846
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-046 in a cloud migration threat model evaluates a finance analyst requesting production database: managed device=no, MFA=no, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Route around the policy through the default gateway.
  3. Deny or step up verification because the policy conditions are not all satisfied.
  4. Always allow read-write access after one successful login.
Practice →
4847
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-047 in an industrial network security review evaluates a database administrator requesting SIEM console: managed device=yes, MFA=yes, risk score=65. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Route around the policy through the default gateway.
  3. Always allow read-write access after one successful login.
  4. Always allow because the request originates internally.
Practice →
4848
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-048 in a managed-service-provider audit evaluates a contractor requesting source repository: managed device=no, MFA=yes, risk score=85. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Always allow because the request originates internally.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Deny or step up verification because the policy conditions are not all satisfied.
Practice →
4849
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-049 in a government zero-trust rollout evaluates a SOC analyst requesting payroll API: managed device=yes, MFA=no, risk score=15. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Always allow because the request originates internally.
  4. Route around the policy through the default gateway.
Practice →
4850
Level 5 · Expert Zero Trust Unanswered

Zero-trust request ZT-050 in a multinational enterprise breach simulation evaluates a developer requesting production database: managed device=no, MFA=yes, risk score=35. Policy requires an approved technical role, managed device, MFA, and risk below 60. What is the correct decision?

View answer choices
  1. Deny or step up verification because the policy conditions are not all satisfied.
  2. Always allow read-write access after one successful login.
  3. Route around the policy through the default gateway.
  4. Always allow because the request originates internally.
Practice →