CSA CCZT Exam - Topic 5 Question 50 Discussion

Actual exam question for CSA's CCZT exam

Question #: 50
Topic #: 5

[All CCZT Questions]

When planning for a ZTA, a critical product of the gap analysis

process is______

Select the best answer.

Aa responsible, accountable, consulted, and informed (RACI) chart
and communication plan

Bsupporting data for the project business case

Cthe implementation's requirements

Da report on impacted identity and access management (IAM)
infrastructure
A critical product of the gap analysis process is the implementation's requirements, which are the specifications and criteria that define the desired outcomes, capabilities, and functionalities of the ZTA. The implementation's requirements are derived from the gap analysis, which identifies the current state, the target state, and the gaps between them. The implementation's requirements help to guide the design, development, testing, and deployment of the ZTA, as well as the evaluation of its effectiveness and alignment with the business objectives and needs.
Reference=
Zero Trust Planning - Cloud Security Alliance, section ''Scope, Priority, & Business Case''
The Zero Trust Journey: 4 Phases of Implementation - SEI Blog, section ''Second Phase: Assess''
Planning for a Zero Trust Architecture: A Planning Guide for Federal ..., section ''Gap Analysis''

Show Suggested Answer

Suggested Answer: C

by Chantell at Mar 04, 2026, 09:11 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Minna

15 days ago

Surprised that the implementation's requirements are the main focus!

upvoted 0 times

...

Eun

20 days ago

I thought it was the RACI chart. Seems important too.

upvoted 0 times

...

Mayra

26 days ago

Definitely the implementation's requirements! That's key.

upvoted 0 times

...

Cordelia

1 month ago

Not sure if I trust that answer, seems too straightforward.

upvoted 0 times

...

Abel

1 month ago

Totally agree, requirements are key for ZTA.

upvoted 0 times

...

Alethea

1 month ago

Surprised that no one mentioned the IAM report!

upvoted 0 times

...

Tawanna

2 months ago

I thought it was the RACI chart.

upvoted 0 times

...

Willie

2 months ago

Definitely the implementation's requirements!

upvoted 0 times

...

Chan

2 months ago

I’m leaning towards the implementation's requirements as the answer, but I wonder if supporting data for the business case could also be considered a critical product in some contexts.

upvoted 0 times

...

Ashley

2 months ago

I feel like the RACI chart and communication plan could also be important, but I guess they come after the requirements are established?

upvoted 0 times

...

Olene

2 months ago

I remember practicing a similar question where the focus was on identifying gaps in IAM infrastructure. That might be relevant here too, but I feel like the requirements are more central.

upvoted 0 times

...

Bette

2 months ago

I think the implementation's requirements are definitely a key outcome of the gap analysis, but I'm not entirely sure if that's the only critical product we should focus on.

upvoted 0 times

...