Hi. Zero trust is a big thing in security at the moment so yes there are questions about that. Make sure you know about zero trust and how that works on a tech perspective and also a commercial perspective. In particular, access control mechanisms are important in this arena.
In terms of cloud it is important to understand how the cloud works, the platforms for example SAAS, IAAS etc and integrations between this and private systems which use IAM and OAuth. You will need to know everything in the books or training but a key thing is ensure you have the latest book/training. This is very important because there are some old frameworks which don't apply anymore and new laws/legislation for certain countries in the last couple of years.
In terms of experience, I have contracted around different companies in the last 10 years doing network security, active directory migrations to 365, hybrid exchange deployments with ADFS, MAC, RBAC and other access control models in the real world. I think this has helped me understand how to answer some of the questions as well as doing the training.
