Discuss CSA CCZT Exam Topic 1 Question 4

Scenario: As a ZTA security administrator, you aim to enforce the

principle of least privilege for private cloud network access. Which

ZTA policy entity is mainly responsible for crafting and maintaining

these policies?

AGateway enforcing access policies

BPolicy enforcement point (PEP)

CPolicy administrator (PA)

DPolicy decision point (PDP)

Suggested Answer: C

A policy administrator (PA) is a ZTA policy entity that is responsible for crafting and maintaining the policies that govern the access to resources in a ZT environment1.A PA defines the rules and conditions that specify who, what, when, where, and how an entity can access a resource, based on the principle of least privilege2.A PA also updates and reviews the policies periodically to ensure they are aligned with the changing business and security requirements3.

Reference=

Zero Trust Architecture | NIST

Zero Trust Architecture: Policy Engine and Policy Administrator

Zero Trust Architecture: Policy Administration

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Polly 10 months ago

I always thought PEP was more involved in this process.

Jeanice 11 months ago

Wait, are we sure it's not the Gateway enforcing access policies?

Sherita 11 months ago

Totally agree, PA is key for maintaining those policies!

Arthur 11 months ago

I thought it was the Policy decision point (PDP) that did this?

Carmen 11 months ago

It's definitely the Policy administrator (PA) that handles this.

Johnetta 12 months ago

I feel like the Gateway enforcing access policies might be a trick answer here. I lean towards the Policy administrator (PA) for this one.

Rashida 12 months ago

The Policy enforcement point (PEP) seems like it would be involved in enforcing the least privilege, but I don't think it creates the policies itself.

Kristofer 12 months ago

I remember practicing a question about the Policy decision point (PDP) and its role in making access decisions, but I can't recall if it also crafts policies.

Caprice 1 year ago

I think the Policy administrator (PA) is the one responsible for crafting the policies, but I'm not entirely sure.

Wade 1 year ago

I'm a bit confused by the different policy entities mentioned here. I'll need to review my notes on zero-trust architecture to make sure I understand the roles and responsibilities of each component. Let me take another look at the question.

Viva 1 year ago

Okay, I think I've got it. The policy administrator (PA) is the entity that's responsible for defining and maintaining the ZTA policies, including the ones related to the principle of least privilege. Option C is the answer.

Elenor 1 year ago

Hmm, I'm a little unsure about this one. The policy enforcement point (PEP) and policy decision point (PDP) also seem like they could be involved in the policy management process. I'll have to think this through carefully.

Nu 1 year ago

This one seems pretty straightforward. The policy administrator (PA) is responsible for crafting and maintaining the ZTA policies, so I'm going with option C.

Jeanice 1 year ago

The key here is that the question is asking about who is responsible for crafting and maintaining the policies, not just enforcing them. Based on that, I believe the policy administrator (PA) is the correct answer, option C.

Elouise 1 year ago

I'm a bit confused by the wording of the question. Is the 'subscriber count' the same as the 'Customer Count' measure? If so, option A might be the simplest solution.

Aja 1 year ago

Okay, I think I've got a handle on this. For scenarios where immediate real-time updates aren't critical, like the warehouse inventory tracking or customer data capture, asynchronous integration would be a better choice to avoid potential performance issues. But for things like gift card balances or product updates, synchronous integration is probably the way to go.

CSA CCZT Exam - Topic 1 Question 4 Discussion