CSA Exam CCZT Topic 2 Question 26 Discussion

Actual exam question for CSA's CCZT exam

Question #: 26
Topic #: 2

[All CCZT Questions]

When planning for ZT implementation, who will determine valid

users, roles, and privileges for accessing data as part of data

governance?

AIT teams

BApplication owners

CAsset owners

DCompliance officers

Show Suggested Answer

Suggested Answer: C

Asset owners are the ones who will determine valid users, roles, and privileges for accessing data as part of data governance. Asset owners are responsible for defining the data classification, sensitivity, and ownership of the data assets they own. They also have the authority to grant or revoke access to the data assets based on the business needs and the Zero Trust policies.

Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 2: Data and Asset Classification

by Tamra at Sep 14, 2024, 04:54 AM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rozella

9 months ago

I'm just hoping the 'Compliance Officers' option doesn't involve wearing a tuxedo and sunglasses. That might be a bit overkill for data governance.

upvoted 0 times

...

Lina

9 months ago

This is a trick question - the answer is obviously all of the above! It's a collaborative effort to ensure the data is properly secured.

upvoted 0 times

...

Solange

9 months ago

Wait, isn't this just a job for the IT team? They're the ones who actually implement the security measures, so they should be the ones making the decisions.

upvoted 0 times

...

Luann

9 months ago

Definitely the application owners. They're the ones who understand the business requirements and can set the appropriate access controls.

upvoted 0 times

Octavio

8 months ago

D) Compliance officers

upvoted 0 times

...

Pura

8 months ago

C) Asset owners

upvoted 0 times

...

Tamar

9 months ago

B) Application owners

upvoted 0 times

...

Wai

9 months ago

A) IT teams

upvoted 0 times

...

Frank

9 months ago

Hold up, why can't the asset owners be in charge of this? They know their data best, and they should be the ones calling the shots.

upvoted 0 times

...

Natalie

9 months ago

I think the compliance officers should be responsible for determining valid users, roles, and privileges. They have the expertise to ensure we meet all regulatory requirements.

upvoted 0 times

Edward

8 months ago

Asset owners should be involved in determining roles and privileges.

upvoted 0 times

...

Fernanda

8 months ago

IT teams may also play a role in determining valid users.

upvoted 0 times

...

Myong

9 months ago

Compliance officers are responsible for ensuring data governance.

upvoted 0 times

...

Shawana

9 months ago

Hey, as long as I can still access the cat memes, I don't really care who's in charge of the data governance. Am I right, folks?

upvoted 0 times

...

Art

9 months ago

As an IT team member, I feel like we should have some input, but ultimately the application owners should be in charge of this.

upvoted 0 times

Bulah

8 months ago

Asset owners might also play a role in determining valid users, roles, and privileges for accessing data.

upvoted 0 times

...

Jutta

8 months ago

I agree, application owners are the ones who understand the data and its importance to their specific needs.

upvoted 0 times

...

Margo

9 months ago

IT teams should definitely have some input, but I think application owners should ultimately be in charge.

upvoted 0 times

...

Nguyet

10 months ago

I think application owners should have a say in determining access as well.

upvoted 0 times

...

Tamra

10 months ago

I disagree, I believe it should be compliance officers who determine access.

upvoted 0 times

...

Caitlin

10 months ago

Asset owners, for sure. They're the ones who own the data, so they should be the ones calling the shots.

upvoted 0 times

Lemuel

9 months ago

Yes, IT teams can help implement the decisions made by asset owners.

upvoted 0 times

...

Celeste

9 months ago

But wouldn't IT teams also play a role in determining access to data?

upvoted 0 times

...

Pamella

10 months ago

I agree, they have the most knowledge about the data and its importance.

upvoted 0 times

...

Laurel

10 months ago

Asset owners are definitely the ones who should determine valid users, roles, and privileges.

upvoted 0 times

...

Maile

10 months ago

I think IT teams will determine valid users, roles, and privileges.

upvoted 0 times

...

Lonna

10 months ago

Compliance officers seem like the logical choice to me. They're the ones who have to make sure the data governance is in line with regulations.

upvoted 0 times

...

Nilsa

10 months ago

I think it's the application owners who should determine the valid users, roles, and privileges. They know their data best.

upvoted 0 times

Hana

10 months ago

B) Application owners

upvoted 0 times

...

Merlyn

10 months ago

A) IT teams

upvoted 0 times

...