Free CSA CCZT Exam Dumps and CCZT Exam Questions

Question No: 1

MultipleChoice

Which ZT element provides information that providers can use to

keep policies dynamically updated?

Options

ACommunication

BData sources

CIdentities

DResources
Data sources are the ZT element that provide information that providers can use to keep policies dynamically updated. Data sources are the inputs that feed the policy engine and the policy administrator with the relevant data and context about the entities, resources, transactions, and environment in the ZTA. Data sources help to inform the policy decisions and actions based on the current state and conditions of the ZTA. Data sources can include identity providers, device management systems, threat intelligence feeds, network monitoring tools, etc.
Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 3: ZTA Architecture and Components

Question No: 2

MultipleChoice

Which component in a ZTA is responsible for deciding whether to

grant access to a resource?

Options

AThe policy enforcement point (PEP)

BThe policy administrator (PA)

CThe policy engine (PE)

DThe policy component
The policy engine (PE) is the component in a ZTA that is responsible for deciding whether to grant access to a resource. The PE evaluates the policies and the contextual data collected from various sources, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors, and then generates an access decision. The PE communicates the access decision to the policy enforcement point (PEP), which enforces the decision on the resource.
Reference=
Certificate of Competence in Zero Trust (CCZT) prepkit, page 14, section 2.2.2
What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''
What is Zero Trust Architecture (ZTA)? | NextLabs, section ''Core Components''
[SP 800-207, Zero Trust Architecture], page 11, section 3.3.1

Question No: 3

MultipleChoice

What steps should organizations take to strengthen access

requirements and protect their resources from unauthorized access

by potential cyber threats?

Options

AUnderstand and identify the data and assets that need to be
protected

BIdentify the relevant architecture capabilities and components that
could impact ZT

CImplement user-based certificates for authentication

DUpdate controls for assets impacted by ZT
The first step that organizations should take to strengthen access requirements and protect their resources from unauthorized access by potential cyber threats is to understand and identify the data and assets that need to be protected. This step involves conducting a data and asset inventory and classification, which helps to determine the value, sensitivity, ownership, and location of the data and assets. By understanding and identifying the data and assets that need to be protected, organizations can define the appropriate access policies and controls based on the Zero Trust principles of never trust, always verify, and assume breach.
Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 2: Data and Asset Classification