Discuss CSA CCZT Exam Topic 4 Question 38

During the monitoring and analytics phase of ZT transaction flows,

organizations should collect statistics and profile the behavior of

transactions. What does this support in the ZTA?

ACreating firewall policies to protect data in motion

BA continuous assessment of all transactions

CFeeding transaction logs into a log monitoring engine

DThe monitoring of relevant data in critical areas
During the monitoring and analytics phase of ZT transaction flows, organizations should collect statistics and profile the behavior of transactions to support a continuous assessment of all transactions. A continuous assessment of all transactions means that the organization constantly evaluates the security posture, performance, and compliance of each transaction, and detects and responds to any anomalies, deviations, or threats. A continuous assessment of all transactions helps to maintain a high level of protection and resilience in the ZTA, and enables the organization to adjust and improve the policies and controls accordingly.
Reference=
Zero Trust Planning - Cloud Security Alliance, section ''Monitor & Measure''
The role of visibility and analytics in zero trust architectures, section ''The basic NIST tenets of this approach include''
Move to the Zero Trust Security Model - Trailhead, section ''Monitor and Maintain Your Environment''

Suggested Answer: B

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Jaleesa 10 months ago

Sounds good, but how practical is it really?

Elfriede 10 months ago

Totally agree, it helps catch threats early.

Nydia 10 months ago

This supports better policy adjustments, for sure!

Whitney 10 months ago

Isn't it a bit overkill to monitor every single transaction?

Antonio 11 months ago

Continuous assessment is key for ZTA!

Bettyann 11 months ago

I’m a bit confused; I thought monitoring was more about creating policies rather than assessing transactions continuously. Maybe I need to review that section again.

Sue 11 months ago

I feel like collecting statistics could also relate to feeding logs into a monitoring engine, but I’m leaning towards B since it emphasizes continuous assessment.

Frederica 11 months ago

I remember practicing a similar question about monitoring in ZTA, and I think it was about how analytics help in detecting anomalies. So, B seems like a strong choice.

Genevive 12 months ago

I think the continuous assessment of all transactions is crucial for maintaining security, but I'm not entirely sure if that's the main focus of this question.

Deandrea 12 months ago

This question is testing our understanding of the role of monitoring and analytics in a zero trust architecture. Based on the information provided, it seems clear that the goal is to support a continuous assessment of all transactions, which allows the organization to detect and respond to any issues or threats in real-time. I feel confident that option B is the right answer here.

Tamala 12 months ago

Okay, I've got this. The monitoring and analytics phase is all about collecting data on transaction behavior and using that to continuously assess the security and performance of the ZTA. So option B, "a continuous assessment of all transactions," is the correct answer. Glad I could figure that out!

Alpha 1 year ago

Hmm, I'm a bit confused by this one. The options seem to cover different aspects of monitoring and analytics, but I'm not sure which one is the best fit. I'll need to think this through carefully and make sure I understand the connection to the ZTA.

Ahmed 1 year ago

This question seems straightforward - it's asking what the monitoring and analytics phase of ZT transaction flows supports in the ZTA. I think the key is to focus on the continuous assessment of all transactions, which is option B.

Stefany 1 year ago

Ha! I bet the exam writers thought this was a tricky question. But B is the way to go - gotta keep an eye on those transactions.

Dorothea 1 year ago

↳ replying to Stefany

B is definitely the best option for maintaining a high level of protection.

France 1 year ago

↳ replying to Stefany

Definitely, it's important to continuously assess and detect any anomalies.

Alease 1 year ago

↳ replying to Stefany

I agree, monitoring all transactions is crucial for security.

Eden 1 year ago

Definitely B. Monitoring and profiling the behavior of transactions enables the organization to detect and respond to any anomalies in real-time.

Wilda 1 year ago

↳ replying to Eden

D) The monitoring of relevant data in critical areas

Fletcher 1 year ago

↳ replying to Eden

C) Feeding transaction logs into a log monitoring engine

Truman 1 year ago

↳ replying to Eden

B) A continuous assessment of all transactions

Tamar 1 year ago

↳ replying to Eden

A) Creating firewall policies to protect data in motion

Jennie 1 year ago

I think the correct answer is B. A continuous assessment of all transactions is crucial for a robust ZTA to maintain security and compliance.

Charlena 1 year ago

↳ replying to Jennie

Yes, it helps to constantly evaluate the security posture and respond to any threats.

Katie 1 year ago

↳ replying to Jennie

I agree, continuous assessment of all transactions is key for security in ZTA.

Lorrine 2 years ago

Feeding transaction logs into a log monitoring engine is also important for monitoring relevant data in critical areas. It helps in detecting and responding to any anomalies or threats.

Paola 2 years ago

I agree with Mignon. It also supports a continuous assessment of all transactions, which is crucial for maintaining security and resilience in the ZTA.

Mignon 2 years ago

I think collecting statistics and profiling transactions helps in creating firewall policies to protect data in motion.

CSA CCZT Exam - Topic 4 Question 38 Discussion