A security policy that assumes no user or device should be trusted by default, requiring continuous verification at every stage of network access, is known as: MCQ with Answer and Explanation

A security policy that assumes no user or device should be trusted by default, requiring continuous verification at every stage of network access, is known as:
A. Least Privilege Access
B. Defense in Depth
C. Zero Trust Architecture
D. Stateful Network Control
Answer: Option C
Solution (By JKSSB Mock Tests)
Zero Trust is an IT security model based on the premise of 'never trust, always verify,' requiring strict identity validation for every person and device trying to access resources on a private network.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
What type of software vulnerability occurs when a program inputs more data into a memory allocation area than it can hold, overwriting adjacent memory spaces with malicious code?
A. Buffer Overflow
B. Cross-Site Scripting
C. Zero-Day Exploit
D. SQL Injection

Correct Answer: Option A


Explanation:
A buffer overflow occurs when data volume exceeds memory allocation block boundaries, allowing attackers to overwrite execution tracks and run arbitrary code.

This question belongs to: Computer Cyber Security
Question #2
Which of the following is a common type of attack against passwords?
A. Man-in-the-middle
B. Dictionary attack
C. Denial-of-service
D. Phishing

Correct Answer: Option B


Explanation:
A dictionary attack uses a list of common words and phrases to guess a password, exploiting weak passwords that are based on dictionary words.

This question belongs to: Computer Cyber Security
Question #3
An attacker sends an email that appears to come from a company's HR department, asking workers to verify financial accounts on a linked website. This exploit is called:
A. Pharming redirection
B. Smishing Attempt
C. Vishing connection
D. Spear Phishing

Correct Answer: Option D


Explanation:
Spear phishing targets specific groups or individuals within an enterprise, using familiar internal context to improve the likelihood of deception.

This question belongs to: Computer Cyber Security