Courseiva
Cloud Security ArchitecturemediumMultiple SelectObjective-mapped

SCAZT Cloud Security Architecture Practice Question

Which TWO are common 'secure access design patterns' in a hybrid cloud?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

ZTNA for remote user access

Standard patterns include ZTNA for users and secure transit gateways for inter-cloud traffic.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Connecting all apps to the local LAN only

    Why it's wrong here

    This does not account for cloud-native apps.

  • ZTNA for remote user access

    Why this is correct

    This is the current best practice for user access.

  • Transit gateway inspection for inter-VPC traffic

    Why this is correct

    Centralized inspection is the standard for inter-VPC security.

  • Open access for all traffic

    Why it's wrong here

    This is insecure and not a design pattern.

  • Public internet bypass for all traffic

    Why it's wrong here

    This is insecure.

About these practice questions

Courseiva writes every SCAZT question from scratch — 317 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Cisco exam blueprint

This SCAZT practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCAZT exam.