Discuss CSA CCZT Exam Topic 3 Question 14

Which approach to ZTA strongly emphasizes proper governance of

access privileges and entitlements for specific assets?

AZTA using device application sandboxing

BZTA using enhanced identity governance

CZTA using micro-segmentation

DZTA using network infrastructure and SDPs
ZTA using enhanced identity governance is an approach to ZTA that strongly emphasizes proper governance of access privileges and entitlements for specific assets. This approach focuses on managing the identity lifecycle, enforcing granular and dynamic policies, and auditing and monitoring access activities. ZTA using enhanced identity governance helps to ensure that only authorized and verified entities can access the protected assets based on the principle of least privilege and the context of the request.
Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 5: Enhanced Identity Governance

Suggested Answer: B

To ensure an acceptable user experience when implementing SDP, a security architect should collaborate with IT to model and plan the user experience, client software distribution, and device onboarding processes. This is because SDP requires users to install and use client software to access the protected resources, and the user experience may vary depending on the device type, operating system, network conditions, and security policies. By modeling and planning the user experience, the security architect and IT can ensure that the SDP implementation is user-friendly, consistent, and secure.

Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 7: Network Infrastructure and SDP

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

41 comments · newest first

Lucia 10 months ago

I didn't know ZTA had so many approaches!

Pilar 11 months ago

B all the way! Proper governance is crucial.

Jesus 11 months ago

Wait, are we sure about that? I thought micro-segmentation was more about access.

Tamesha 11 months ago

I agree, B is the way to go for access control.

Darell 11 months ago

Definitely B! Enhanced identity governance is key.

Hollis 12 months ago

I’m leaning towards D because it mentions network infrastructure, but I’m not confident it focuses on governance like the question asks.

Rhea 12 months ago

I feel like enhanced identity governance is definitely related to access privileges, but I can't remember the specifics. Maybe I should go with B?

Azalee 12 months ago

I recall a practice question that mentioned micro-segmentation, but it was more about network security than governance. So, I guess that rules out C.

Leontine 1 year ago

I think the answer might be B, but I'm not entirely sure. I remember something about identity governance being crucial for managing access.

Latrice 1 year ago

I'm a little confused by the wording of this question. All the options sound like they could be related to access control, but I think enhanced identity governance is the one that best fits the description of emphasizing governance of privileges and entitlements.

Ezekiel 1 year ago

Okay, I've got this. Enhanced identity governance is the way to go here. It's all about managing identities and access entitlements, which is exactly what the question is asking about.

Jonelle 1 year ago

Hmm, I'm a bit unsure about this one. The question is asking about the ZTA approach that emphasizes access governance, but a few of these options sound similar. I'll need to think it through carefully.

Ivette 1 year ago

This one seems pretty straightforward. Enhanced identity governance is all about controlling access privileges, so that's got to be the right answer.

Joana 1 year ago

Okay, let me see. I think the two principles are revenue recognition and measurement. But I'm not 100% sure, so I'll have to double-check my notes to be certain.

Art 1 year ago

I'm a bit confused by the different tables and lists mentioned here. I'll need to make sure I understand the relationship between the BOM Mapping Configuration rule, the BOM Item Definition Table, and the BOM Item Mapping Table before I can confidently answer this question.

Marisha 1 year ago

Hmm, I'm a bit confused by the different options. I'll need to make sure I understand the differences between using AWS Config, S3 Batch Operations, and Lambda functions.

Sylvia 1 year ago

Hmm, I'm a bit unsure about this one. I know options and futures are both financial derivatives, but I'm not sure which one is specifically used to hedge exchange rate risks. Let me think this through carefully.

Lashandra 1 year ago

Enhanced identity governance? More like 'enhanced micromanagement', am I right? But hey, it's the correct answer, so I guess I'll have to deal with it.

Camellia 1 year ago

↳ replying to Lashandra

Exactly, it's a key aspect of implementing a Zero Trust approach.

Page 1 year ago

↳ replying to Lashandra

True, it's all about ensuring only the right people have access to sensitive assets.

Marshall 1 year ago

↳ replying to Lashandra

But it's important for proper access control and security.

Adelle 1 year ago

↳ replying to Lashandra

Yeah, enhanced identity governance can feel like micromanagement sometimes.

Mila 1 year ago

David

Ilene 1 year ago

Network infrastructure and SDPs? Nah, I'd rather focus on who's got access and how much. Enhanced identity governance is the way to go.

Daren 1 year ago

↳ replying to Ilene

ZTA using micro-segmentation can also help control access based on context.

Aja 1 year ago

↳ replying to Ilene

Enhanced identity governance helps to ensure only authorized entities can access assets.

Alica 1 year ago

↳ replying to Ilene

I agree, focusing on access privileges and entitlements is crucial for security.

Bernardine 1 year ago

Device application sandboxing? Sounds like a lot of work. I'll take the enhanced identity governance approach - keeps things tidy and secure.

Rima 1 year ago

↳ replying to Bernardine

I prefer the approach that focuses on managing identities and enforcing policies to keep things secure.

Stephen 1 year ago

↳ replying to Bernardine

Yeah, it may require some effort but it's worth it for the security and control it provides.

Lera 1 year ago

↳ replying to Bernardine

I prefer the enhanced identity governance approach as well, it's important to have proper governance in place.

Silvana 1 year ago

↳ replying to Bernardine

I agree, enhanced identity governance is definitely the way to go for proper access control.

Jose 1 year ago

↳ replying to Bernardine

Yeah, it helps keep everything organized and secure without too much hassle.

Laurel 1 year ago

↳ replying to Bernardine

I agree, enhanced identity governance is definitely the way to go for proper access control.

Omer 1 year ago

Micro-segmentation sounds like a fancy way to say 'slice and dice', but I'm more of a 'keep it simple' kind of gal. Enhanced identity governance is where it's at.

Tiffiny 1 year ago

↳ replying to Omer

Micro-segmentation may sound fancy, but sometimes simple is better.

Elli 1 year ago

↳ replying to Omer

I agree, enhanced identity governance is essential for proper access control.

Anissa 2 years ago

Enhanced identity governance? That's the one for me! Gotta keep those privileges in check, you know?

Cheryl 2 years ago

I'm not sure, but it makes sense that managing identity lifecycle is key for security.

Giuseppe 2 years ago

I agree with Nguyet. Enhanced identity governance is crucial for proper access control.

Nguyet 2 years ago

I think the answer is B) ZTA using enhanced identity governance.

CSA CCZT Exam - Topic 3 Question 14 Discussion