MENU
According to NIST, what are the key mechanisms for defining,
managing, and enforcing policies in a ZTA?
Suggested Answer: A
Get Premium CCZT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
According to NIST, the key mechanisms for defining, managing, and enforcing policies in a ZTA are the policy decision point (PDP), the policy enforcement point (PEP), and the policy information point (PIP). The PDP is the component that evaluates the policies and the contextual data collected from various sources and generates an access decision. The PEP is the component that enforces the access decision on the resource. The PIP is the component that provides the contextual data to the PDP, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors.
Reference=
Zero Trust Architecture Project - NIST Computer Security Resource Center, slide 9
What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''
Zero Trust Frameworks Architecture Guide - Cisco, page 4, section ''Policy Decision Point''
49 comments · newest first
RE
Rex
10 months ago
A is spot on, can’t argue with NIST!
LU
Luis
11 months ago
I’m not sure about D, seems a bit too niche.
JA
James
11 months ago
Wait, is C even a thing in ZTA? Sounds off.
VI
Viva
11 months ago
I think B has some relevance too, especially with IAM.
BE
Bea
11 months ago
Definitely A, those are the core components!
TH
Thurman
12 months ago
I vaguely recall something about control planes from a previous study session, so C could be a possibility, but I’m not certain how it fits into ZTA specifically.
LE
Lemuel
12 months ago
I’m leaning towards B because it mentions IAM, which is crucial for managing identities, but I’m not confident about the other components.
ST
Stefany
12 months ago
I remember practicing a question about ZTA policies, and I feel like option D sounds familiar, but I can't recall the exact roles of the policy engine and administrator.
LY
Lynelle
1 year ago
I think the answer might be A, but I'm not entirely sure about the definitions of PDP, PEP, and PIP.
TH
Theron
1 year ago
I'm a bit confused by all the acronyms in these options. I know zero trust is an important security model, but the specific NIST mechanisms are not something I've studied in depth. I'll have to review my notes and see if I can piece this together.
MA
Marquetta
1 year ago
Hmm, I'm not totally sure about this one. The options seem a bit technical and I'm not super familiar with the NIST zero trust terminology. I'll have to think this through carefully.
LA
Lashawnda
1 year ago
I think the key mechanisms are the policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP) mentioned in option A. That sounds like the NIST framework for defining, managing, and enforcing policies in a zero trust architecture.
CE
Cecily
1 year ago
Option A looks like the right answer to me. The PDP, PEP, and PIP are the core components that NIST describes for implementing policy management in a zero trust environment. I feel pretty confident about this one.
ME
Melodie
1 year ago
Whew, this is a lot of information to sift through. But I think if I methodically go through each cost item and determine its relevance, I should be able to arrive at the correct total relevant cost.
AL
Alline
2 years ago
Option D sounds like it was made up by someone who just threw random words together. PB? Really? I'll stick with A, the one that actually makes sense.
BU
Bulah
2 years ago
Definitely going with A, it just makes sense.
FR
Franchesca
2 years ago
Yeah, A seems to be the most straightforward.
GE
Georgene
2 years ago
I think option A is the most logical choice.
HE
Helga
2 years ago
I agree, option D does sound a bit strange.
LE
Lettie
2 years ago
Ha! As if the correct answer could be anything other than A. The NIST guys are all about those 3 P's - PDP, PEP, and PIP. Straight from the source, people!
MA
Margot
2 years ago
I agree with Lezlie. The NIST guidelines are clear on this, and A is the way to go.
LE
Lezlie
2 years ago
Option A is the correct answer. NIST defines the key mechanisms as PDP, PEP, and PIP. This is the standard approach for policy management in a Zero Trust Architecture.
JU
Justa
2 years ago
It's important to have a clear understanding of these mechanisms to ensure effective policy enforcement in a ZTA.
FL
Floyd
2 years ago
Yes, you're right. NIST identifies those as the key components for policy management in a Zero Trust Architecture.
RE
Reed
2 years ago
I think the key mechanisms for defining, managing, and enforcing policies in a ZTA are PDP, PEP, and PIP.
LO
Lorrie
2 years ago
C) Control, data, and application plane? Somebody's been watching too much Skynet.
WA
Wava
2 years ago
A) Yup, the PDP, PEP, and PIP - the holy trinity of zero trust policy management!
DE
Delfina
2 years ago
Raelene: It's important to have a solid foundation for policy management in a Zero Trust Architecture.
RA
Raelene
2 years ago
Definitely, those key mechanisms help define, manage, and enforce policies effectively.
KE
Keena
2 years ago
I agree, the PDP, PEP, and PIP are crucial for zero trust policy management.
RO
Rory
2 years ago
B) Data access, PKI, and IAM - that's the real-world stuff, not some abstract policy points.
SI
Simona
2 years ago
A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)
FE
Felton
2 years ago
D) Policy engine (PE), policy administrator (PA), and policy broker (PB)
GE
Gerri
2 years ago
B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM) - that's the real-world stuff, not some abstract policy points.
CH
Chery
2 years ago
A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)
CH
Charlene
2 years ago
D) What? Policy engine, administrator, and broker? Sounds like something out of a sci-fi movie.
BE
Bette
2 years ago
C) Control plane, data plane, and application plane
DO
Douglass
2 years ago
B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM)
MA
Marguerita
2 years ago
A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)
QU
Quentin
2 years ago
I'm not sure, but I think option D) Policy engine (PE), policy administrator (PA), and policy broker (PB) could also be key mechanisms for policies in a ZTA.
MA
Markus
2 years ago
A) Looks like the textbook answer to me. NIST definitely emphasizes those key policy control points.
LE
Leontine
2 years ago
D) NIST provides a solid framework for implementing effective policy control in ZTA.
KI
Kina
2 years ago
C) It's important to have a clear understanding of how policies are defined and enforced in a Zero Trust Architecture.
LO
Louisa
2 years ago
B) I remember studying those key mechanisms in my cybersecurity class.
CA
Cathrine
2 years ago
A) Yeah, those are the fundamental components for policy management in a ZTA.
PE
Peggy
2 years ago
B) I agree, those components are essential for defining, managing, and enforcing policies.
CA
Catina
2 years ago
A) Yeah, NIST really focuses on those key mechanisms for policy control in a ZTA.
SE
Serina
2 years ago
I agree with Luisa, those mechanisms make sense for defining, managing, and enforcing policies in a ZTA.
LU
Luisa
2 years ago
I think the key mechanisms are A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP).