Discuss CSA CCZT Exam Topic 2 Question 39

Which component in a ZTA is responsible for deciding whether to

grant access to a resource?

AThe policy enforcement point (PEP)

BThe policy administrator (PA)

CThe policy engine (PE)

DThe policy component
The policy engine (PE) is the component in a ZTA that is responsible for deciding whether to grant access to a resource. The PE evaluates the policies and the contextual data collected from various sources, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors, and then generates an access decision. The PE communicates the access decision to the policy enforcement point (PEP), which enforces the decision on the resource.
Reference=
Certificate of Competence in Zero Trust (CCZT) prepkit, page 14, section 2.2.2
What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''
What is Zero Trust Architecture (ZTA)? | NextLabs, section ''Core Components''
[SP 800-207, Zero Trust Architecture], page 11, section 3.3.1

Suggested Answer: C

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

37 comments · newest first

Daniel 10 months ago

I thought the policy administrator had a bigger role in this.

Raul 10 months ago

Wait, isn't the PEP the one that actually enforces it?

Milly 10 months ago

Totally agree, the PE is key in ZTA.

Wilda 10 months ago

Surprised to learn the PE does all that evaluation!

Suzi 11 months ago

It's the policy engine (PE) that decides access!

Fletcher 11 months ago

I definitely recall that the PE is crucial for evaluating access requests, but I keep mixing up the roles of the PEP and the PA.

Lanie 11 months ago

I’m a bit confused; I thought the policy administrator (PA) had a role in access decisions too, but now I’m leaning towards the PE being the main component.

Rikki 11 months ago

I remember practicing a question about ZTA components, and I think the policy enforcement point (PEP) just enforces the decision made by the PE, right?

Gregoria 12 months ago

I think the policy engine (PE) is the right answer since it evaluates the policies and makes the access decision, but I’m not entirely sure.

Valentin 12 months ago

I'm a bit confused on the difference between the policy engine and the policy enforcement point. I know they're both important parts of ZTA, but I'm not sure I fully understand their distinct roles. I'll have to review my notes to make sure I've got this right.

Shannan 12 months ago

Okay, I've got this. The policy engine is the component that evaluates the policies and contextual data to determine whether to grant access. The policy enforcement point is the one that actually enforces the decision, but the policy engine is the decision-maker. I feel good about this one.

Amber 1 year ago

Hmm, I'm a little unsure about this one. I know the different components of ZTA, but I'm not totally clear on which one is specifically responsible for the access decision. I'll have to think this through carefully.

Delisa 1 year ago

This looks like a pretty straightforward question about the components of a Zero Trust Architecture. I'm pretty confident I know the answer - the policy engine is responsible for making the access decision.

Joanna 1 year ago

Yes, the PE communicates the decision to the PEP for enforcement.

Aliza 1 year ago

But isn't the policy enforcement point (PEP) the one enforcing the decision?

Cassi 1 year ago

The policy engine is the ZTA's built-in bouncer, making sure only the worthy ones get past the gates. A crucial component, for sure.

Billye 1 year ago

↳ replying to Cassi

A: Exactly! It evaluates all the factors before making a decision.

Deeanna 1 year ago

↳ replying to Cassi

B: So it's like the bouncer at a club, only letting in the VIPs?

Lilli 1 year ago

↳ replying to Cassi

A: The policy engine is like the gatekeeper of ZTA, deciding who gets in and who doesn't.

Gilbert 1 year ago

Haha, the policy engine is the ZTA's very own decision-making supercomputer. No other component can match its access-granting prowess!

Jade 1 year ago

↳ replying to Gilbert

User 2: Yeah, it's the one calling the shots on who gets access to what.

Marquetta 1 year ago

↳ replying to Gilbert

User 1: The policy engine is like the brains of the operation.

Mariann 1 year ago

C'mon, it's got to be the policy engine. That's the component that calls the shots, like the quarterback of the ZTA team.

Lea 1 year ago

↳ replying to Mariann

D) The policy component

Eileen 1 year ago

↳ replying to Mariann

C) The policy engine (PE)

Hector 1 year ago

↳ replying to Mariann

B) The policy administrator (PA)

Larue 1 year ago

↳ replying to Mariann

A) The policy enforcement point (PEP)

Melissia 1 year ago

I agree with the answer. The PE is where the magic happens in a zero trust architecture. It's the brains of the operation.

Katheryn 1 year ago

↳ replying to Melissia

Without the PE, the whole system wouldn't function properly.

Olga 1 year ago

↳ replying to Melissia

Absolutely, it's where all the access decisions are made.

Denae 1 year ago

↳ replying to Melissia

PE is definitely the key player in ZTA.

Justine 1 year ago

The policy engine (PE) is definitely the correct answer. It's the heart of the ZTA, making the access decisions based on all the contextual data.

Dierdre 1 year ago

↳ replying to Justine

User 3: The PE communicates the access decision to the policy enforcement point (PEP) for enforcement.

Mattie 1 year ago

↳ replying to Justine

User 2: Yes, it evaluates all the policies and contextual data to make access decisions.

Dahlia 1 year ago

↳ replying to Justine

User 1: The policy engine (PE) is definitely the correct answer.

Jesusita 1 year ago

I agree with Joanna, the PE evaluates policies and makes the access decision.

Joanna 1 year ago

I think the policy engine (PE) is responsible for granting access.

CSA CCZT Exam - Topic 2 Question 39 Discussion