CSA CCZT Exam - Topic 4 Question 19 Discussion

Actual exam question for CSA's CCZT exam

Question #: 19
Topic #: 4

In a ZTA, where should policies be created?

AData plane

BNetwork

CControl plane

DEndpoint
In a ZTA, policies should be created in the control plane, which is the logical component that defines and manages the policies for accessing resources.The control plane consists of policy entities, such as policy administrators, policy engines, and policy decision points, that are responsible for crafting, maintaining, evaluating, and enforcing the policies1.The control plane interacts with the data plane, which is the logical component that handles the data transmission and processing, and the network, which is the physical or virtual component that provides the connectivity and transport for the data plane1.The endpoint is the device or system that requests or provides access to a resource1.
Reference=
Zero Trust Architecture | NIST

Show Suggested Answer

Suggested Answer: B

After successful authentication and authorization, the client typically sends an SPA packet to the controller, which acts as an intermediary in authenticating the client's request before access to the accepting host is granted. Reference = Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance, Zero Trust Training (ZTT) - Module 9: Risk Management

by Inocencia at Jul 04, 2024, 02:38 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Andra

6 months ago

Control plane is the way to go, no doubt about it!

upvoted 0 times

...

Van

6 months ago

Sounds right, but I’m surprised it’s not at the endpoint level.

upvoted 0 times

...

Rodolfo

6 months ago

Wait, are we sure about that? I thought it could be in the data plane too.

upvoted 0 times

...

Angella

7 months ago

Totally agree, that's where the management happens!

upvoted 0 times

...

Melodie

7 months ago

Policies should definitely be in the control plane.

upvoted 0 times

...

Franklyn

7 months ago

I definitely recall that the control plane is crucial for managing policies, but I wonder if there are exceptions in certain architectures.

upvoted 0 times

...

Stefania

7 months ago

I'm a bit confused. I thought policies could be in the data plane too, but now I'm leaning towards the control plane after reviewing some materials.

upvoted 0 times

...

Hyman

7 months ago

I remember practicing a question about where policies are defined, and I think it was also related to the control plane. That makes sense, right?

upvoted 0 times

...

Crissy

8 months ago

I think policies are created in the control plane, but I'm not entirely sure. It feels like I read something about it in the NIST guidelines.

upvoted 0 times

...

Essie

8 months ago

The control plane makes sense to me as the place where policies are created and enforced in a zero trust architecture. That's where the policy entities like the decision points live, right?

upvoted 0 times

...

Amira

8 months ago

Hmm, I'm a bit unsure about this one. Is the control plane really the right place for policies in a ZTA? I'll need to review the NIST guidance again to be sure.

upvoted 0 times

...

Merilyn

8 months ago

This seems straightforward - the policies should be created in the control plane, which is responsible for defining and managing the access policies.

upvoted 0 times

...

Susy

8 months ago

Okay, I think I've got this. The key is that the control plane is the logical component that handles the policies, while the data plane deals with the actual data transmission. So the policies have to be created in the control plane.

upvoted 0 times

...

Hubert

8 months ago

I think this question is asking about how scan caching is used in agentless Deep Security implementations, so I'll need to focus on the agentless aspect and how scan caching works in that context.

upvoted 0 times

...

Lindsey

8 months ago

That makes sense. Doing the cleansing after partitioning allows you to see how effective the methods were, since you can compare the cleaned and uncleaned test sets. Seems like a good strategy to me.

upvoted 0 times

...

Verlene

8 months ago

I feel pretty confident about this one. The customer-provided key options and the single-tenant infrastructure partitions seem like the most robust security measures to me.

upvoted 0 times

...