CSA Exam CCZT Topic 2 Question 39 Discussion

Actual exam question for CSA's CCZT exam

Question #: 39
Topic #: 2

[All CCZT Questions]

Which component in a ZTA is responsible for deciding whether to

grant access to a resource?

AThe policy enforcement point (PEP)

BThe policy administrator (PA)

CThe policy engine (PE)

DThe policy component
The policy engine (PE) is the component in a ZTA that is responsible for deciding whether to grant access to a resource. The PE evaluates the policies and the contextual data collected from various sources, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors, and then generates an access decision. The PE communicates the access decision to the policy enforcement point (PEP), which enforces the decision on the resource.
Reference=
Certificate of Competence in Zero Trust (CCZT) prepkit, page 14, section 2.2.2
What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''
What is Zero Trust Architecture (ZTA)? | NextLabs, section ''Core Components''
[SP 800-207, Zero Trust Architecture], page 11, section 3.3.1

Show Suggested Answer

Suggested Answer: C

by Taryn at May 01, 2025, 12:14 AM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF