CSA CCZT Exam - Topic 2 Question 39 Discussion

Actual exam question for CSA's CCZT exam

Question #: 39
Topic #: 2

Which component in a ZTA is responsible for deciding whether to

grant access to a resource?

AThe policy enforcement point (PEP)

BThe policy administrator (PA)

CThe policy engine (PE)

DThe policy component
The policy engine (PE) is the component in a ZTA that is responsible for deciding whether to grant access to a resource. The PE evaluates the policies and the contextual data collected from various sources, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors, and then generates an access decision. The PE communicates the access decision to the policy enforcement point (PEP), which enforces the decision on the resource.
Reference=
Certificate of Competence in Zero Trust (CCZT) prepkit, page 14, section 2.2.2
What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''
What is Zero Trust Architecture (ZTA)? | NextLabs, section ''Core Components''
[SP 800-207, Zero Trust Architecture], page 11, section 3.3.1

Show Suggested Answer

Suggested Answer: C

by Taryn at May 01, 2025, 12:14 AM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Daniel

7 months ago

I thought the policy administrator had a bigger role in this.

upvoted 0 times

...

Raul

7 months ago

Wait, isn't the PEP the one that actually enforces it?

upvoted 0 times

...

Milly

7 months ago

Totally agree, the PE is key in ZTA.

upvoted 0 times

...

Wilda

7 months ago

Surprised to learn the PE does all that evaluation!

upvoted 0 times

...

Suzi

8 months ago

It's the policy engine (PE) that decides access!

upvoted 0 times

...

Fletcher

8 months ago

I definitely recall that the PE is crucial for evaluating access requests, but I keep mixing up the roles of the PEP and the PA.

upvoted 0 times

...

Lanie

8 months ago

I’m a bit confused; I thought the policy administrator (PA) had a role in access decisions too, but now I’m leaning towards the PE being the main component.

upvoted 0 times

...

Rikki

8 months ago

I remember practicing a question about ZTA components, and I think the policy enforcement point (PEP) just enforces the decision made by the PE, right?

upvoted 0 times

...

Gregoria

9 months ago

I think the policy engine (PE) is the right answer since it evaluates the policies and makes the access decision, but I’m not entirely sure.

upvoted 0 times

...

Valentin

9 months ago

I'm a bit confused on the difference between the policy engine and the policy enforcement point. I know they're both important parts of ZTA, but I'm not sure I fully understand their distinct roles. I'll have to review my notes to make sure I've got this right.

upvoted 0 times

...

Shannan

9 months ago

Okay, I've got this. The policy engine is the component that evaluates the policies and contextual data to determine whether to grant access. The policy enforcement point is the one that actually enforces the decision, but the policy engine is the decision-maker. I feel good about this one.

upvoted 0 times

...

Amber

9 months ago

Hmm, I'm a little unsure about this one. I know the different components of ZTA, but I'm not totally clear on which one is specifically responsible for the access decision. I'll have to think this through carefully.

upvoted 0 times

...

Delisa

9 months ago

This looks like a pretty straightforward question about the components of a Zero Trust Architecture. I'm pretty confident I know the answer - the policy engine is responsible for making the access decision.

upvoted 0 times

...

Joanna

1 year ago

Yes, the PE communicates the decision to the PEP for enforcement.

upvoted 0 times

...

Aliza

1 year ago

But isn't the policy enforcement point (PEP) the one enforcing the decision?

upvoted 0 times

...

Cassi

1 year ago

The policy engine is the ZTA's built-in bouncer, making sure only the worthy ones get past the gates. A crucial component, for sure.

upvoted 0 times

Billye

1 year ago

A: Exactly! It evaluates all the factors before making a decision.

upvoted 0 times

...

Deeanna

1 year ago

B: So it's like the bouncer at a club, only letting in the VIPs?

upvoted 0 times

...

Lilli

1 year ago

A: The policy engine is like the gatekeeper of ZTA, deciding who gets in and who doesn't.

upvoted 0 times

...

Gilbert

1 year ago

Haha, the policy engine is the ZTA's very own decision-making supercomputer. No other component can match its access-granting prowess!

upvoted 0 times

Jade

1 year ago

User 2: Yeah, it's the one calling the shots on who gets access to what.

upvoted 0 times

...

Marquetta

1 year ago

User 1: The policy engine is like the brains of the operation.

upvoted 0 times

...

Mariann

1 year ago

C'mon, it's got to be the policy engine. That's the component that calls the shots, like the quarterback of the ZTA team.

upvoted 0 times

Lea

1 year ago

D) The policy component

upvoted 0 times

...

Eileen

1 year ago

C) The policy engine (PE)

upvoted 0 times

...

Hector

1 year ago

B) The policy administrator (PA)

upvoted 0 times

...

Larue

1 year ago

A) The policy enforcement point (PEP)

upvoted 0 times

...

Melissia

1 year ago

I agree with the answer. The PE is where the magic happens in a zero trust architecture. It's the brains of the operation.

upvoted 0 times

Katheryn

1 year ago

Without the PE, the whole system wouldn't function properly.

upvoted 0 times

...

Olga

1 year ago

Absolutely, it's where all the access decisions are made.

upvoted 0 times

...

Denae

1 year ago

PE is definitely the key player in ZTA.

upvoted 0 times

...

Justine

1 year ago

The policy engine (PE) is definitely the correct answer. It's the heart of the ZTA, making the access decisions based on all the contextual data.

upvoted 0 times

Dierdre

1 year ago

User 3: The PE communicates the access decision to the policy enforcement point (PEP) for enforcement.

upvoted 0 times

...

Mattie

1 year ago

User 2: Yes, it evaluates all the policies and contextual data to make access decisions.

upvoted 0 times

...

Dahlia

1 year ago

User 1: The policy engine (PE) is definitely the correct answer.

upvoted 0 times

...

Jesusita

1 year ago

I agree with Joanna, the PE evaluates policies and makes the access decision.

upvoted 0 times

...

Joanna

1 year ago

I think the policy engine (PE) is responsible for granting access.

upvoted 0 times

...