CompTIA DataX (CNX-001) — Question 18

An architect needs to deploy a new payroll application on a cloud host. End users' access to the application will be based on the end users' role. In addition, the host must be deployed on the 192.168.77.32/30 subnet. Which of the following Zero Trust elements are being implemented in this design? (Choose two.)

Answer options

• A. Least privilege
• B. Device trust
• C. Microsegmentation
• D. CASB
• E. WAF
• F. MFA

Correct answer: A, C

Explanation

The correct answers, A and C, refer to Least Privilege and Microsegmentation, respectively. Least Privilege ensures that users only have the access necessary for their roles, while Microsegmentation enhances security by isolating workloads. The other options, while relevant to security, do not directly relate to the specific role-based access and subnet configuration described.