Discuss CSA CCZT Exam Topic 4 Question 19

In a ZTA, where should policies be created?

AData plane

BNetwork

CControl plane

DEndpoint
In a ZTA, policies should be created in the control plane, which is the logical component that defines and manages the policies for accessing resources.The control plane consists of policy entities, such as policy administrators, policy engines, and policy decision points, that are responsible for crafting, maintaining, evaluating, and enforcing the policies1.The control plane interacts with the data plane, which is the logical component that handles the data transmission and processing, and the network, which is the physical or virtual component that provides the connectivity and transport for the data plane1.The endpoint is the device or system that requests or provides access to a resource1.
Reference=
Zero Trust Architecture | NIST

Suggested Answer: B

After successful authentication and authorization, the client typically sends an SPA packet to the controller, which acts as an intermediary in authenticating the client's request before access to the accepting host is granted. Reference = Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance, Zero Trust Training (ZTT) - Module 9: Risk Management

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Andra 10 months ago

Control plane is the way to go, no doubt about it!

Van 11 months ago

Sounds right, but I’m surprised it’s not at the endpoint level.

Rodolfo 11 months ago

Wait, are we sure about that? I thought it could be in the data plane too.

Angella 11 months ago

Totally agree, that's where the management happens!

Melodie 11 months ago

Policies should definitely be in the control plane.

Franklyn 12 months ago

I definitely recall that the control plane is crucial for managing policies, but I wonder if there are exceptions in certain architectures.

Stefania 12 months ago

I'm a bit confused. I thought policies could be in the data plane too, but now I'm leaning towards the control plane after reviewing some materials.

Hyman 12 months ago

I remember practicing a question about where policies are defined, and I think it was also related to the control plane. That makes sense, right?

Crissy 1 year ago

I think policies are created in the control plane, but I'm not entirely sure. It feels like I read something about it in the NIST guidelines.

Essie 1 year ago

The control plane makes sense to me as the place where policies are created and enforced in a zero trust architecture. That's where the policy entities like the decision points live, right?

Amira 1 year ago

Hmm, I'm a bit unsure about this one. Is the control plane really the right place for policies in a ZTA? I'll need to review the NIST guidance again to be sure.

Merilyn 1 year ago

This seems straightforward - the policies should be created in the control plane, which is responsible for defining and managing the access policies.

Susy 1 year ago

Okay, I think I've got this. The key is that the control plane is the logical component that handles the policies, while the data plane deals with the actual data transmission. So the policies have to be created in the control plane.

Hubert 1 year ago

I think this question is asking about how scan caching is used in agentless Deep Security implementations, so I'll need to focus on the agentless aspect and how scan caching works in that context.

Lindsey 1 year ago

That makes sense. Doing the cleansing after partitioning allows you to see how effective the methods were, since you can compare the cleaned and uncleaned test sets. Seems like a good strategy to me.

Verlene 1 year ago

I feel pretty confident about this one. The customer-provided key options and the single-tenant infrastructure partitions seem like the most robust security measures to me.

Maurine 1 year ago

Control plane, no doubt. That's where the real magic happens. Though I'm still trying to figure out how to get my cat to write policies for me.

Kattie 1 year ago

↳ replying to Maurine

Maybe you can train your cat to be a policy administrator in the control plane!

Janna 1 year ago

↳ replying to Maurine

Haha, getting your cat to write policies would be quite a challenge!

Natalie 1 year ago

↳ replying to Maurine

I agree, the control plane is where policies should be created. Maybe your cat can help with testing them out!

Richelle 1 year ago

↳ replying to Maurine

Haha, getting your cat to write policies would be quite the challenge!

Kristel 1 year ago

↳ replying to Maurine

Control plane is definitely the place for policies. It's where all the magic happens.

Daren 1 year ago

↳ replying to Maurine

Control plane is definitely the place for policies. It's where all the magic happens.

Nickie 1 year ago

Well, if it's not in the control plane, I'm not even sure where else it could be. Might as well ask me to put my shoes on my head!

Katina 1 year ago

Control plane, definitely. Wouldn't want to mix up my data and my policies, that's a recipe for a security nightmare.

Carey 1 year ago

Ah, the classic control plane conundrum! I bet the policy experts have a field day with this one.

Shad 1 year ago

↳ replying to Carey

Yes, policy experts definitely have a lot to consider in the control plane.

Teresita 1 year ago

↳ replying to Carey

Control plane is where policies should be created.

Florinda 2 years ago

But what about the data plane and network components? Don't they play a role in policy enforcement?

Linwood 2 years ago

I agree with Lyndia, the control plane manages the policies for accessing resources.

Lyndia 2 years ago

I think policies should be created in the control plane.

CSA CCZT Exam - Topic 4 Question 19 Discussion