CSA CCZT Exam - Topic 6 Question 27 Discussion

Actual exam question for CSA's CCZT exam

Question #: 27
Topic #: 6

[All CCZT Questions]

According to NIST, what are the key mechanisms for defining,

managing, and enforcing policies in a ZTA?

APolicy decision point (PDP), policy enforcement point (PEP), and
policy information point (PIP)

BData access policy, public key infrastructure (PKI), and identity and
access management (IAM)

CControl plane, data plane, and application plane

DPolicy engine (PE), policy administrator (PA), and policy broker (PB)

Show Suggested Answer

Suggested Answer: A

According to NIST, the key mechanisms for defining, managing, and enforcing policies in a ZTA are the policy decision point (PDP), the policy enforcement point (PEP), and the policy information point (PIP). The PDP is the component that evaluates the policies and the contextual data collected from various sources and generates an access decision. The PEP is the component that enforces the access decision on the resource. The PIP is the component that provides the contextual data to the PDP, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors.

Reference=

Zero Trust Architecture Project - NIST Computer Security Resource Center, slide 9

What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''

Zero Trust Frameworks Architecture Guide - Cisco, page 4, section ''Policy Decision Point''

by Louvenia at Sep 13, 2024, 01:44 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rex

3 months ago

A is spot on, can’t argue with NIST!

upvoted 0 times

...

Luis

3 months ago

I’m not sure about D, seems a bit too niche.

upvoted 0 times

...

James

3 months ago

Wait, is C even a thing in ZTA? Sounds off.

upvoted 0 times

...

Viva

4 months ago

I think B has some relevance too, especially with IAM.

upvoted 0 times

...

Bea

4 months ago

Definitely A, those are the core components!

upvoted 0 times

...

Thurman

4 months ago

I vaguely recall something about control planes from a previous study session, so C could be a possibility, but I’m not certain how it fits into ZTA specifically.

upvoted 0 times

...

Lemuel

4 months ago

I’m leaning towards B because it mentions IAM, which is crucial for managing identities, but I’m not confident about the other components.

upvoted 0 times

...

Stefany

4 months ago

I remember practicing a question about ZTA policies, and I feel like option D sounds familiar, but I can't recall the exact roles of the policy engine and administrator.

upvoted 0 times

...

Lynelle

5 months ago

I think the answer might be A, but I'm not entirely sure about the definitions of PDP, PEP, and PIP.

upvoted 0 times

...

Theron

5 months ago

I'm a bit confused by all the acronyms in these options. I know zero trust is an important security model, but the specific NIST mechanisms are not something I've studied in depth. I'll have to review my notes and see if I can piece this together.

upvoted 0 times

...

Marquetta

5 months ago

Hmm, I'm not totally sure about this one. The options seem a bit technical and I'm not super familiar with the NIST zero trust terminology. I'll have to think this through carefully.

upvoted 0 times

...

Lashawnda

5 months ago

I think the key mechanisms are the policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP) mentioned in option A. That sounds like the NIST framework for defining, managing, and enforcing policies in a zero trust architecture.

upvoted 0 times

...

Cecily

5 months ago

Option A looks like the right answer to me. The PDP, PEP, and PIP are the core components that NIST describes for implementing policy management in a zero trust environment. I feel pretty confident about this one.

upvoted 0 times

...

Melodie

5 months ago

Whew, this is a lot of information to sift through. But I think if I methodically go through each cost item and determine its relevance, I should be able to arrive at the correct total relevant cost.

upvoted 0 times

...

Alline

1 year ago

Option D sounds like it was made up by someone who just threw random words together. PB? Really? I'll stick with A, the one that actually makes sense.

upvoted 0 times

Bulah

1 year ago

Definitely going with A, it just makes sense.

upvoted 0 times

...

Franchesca

1 year ago

Yeah, A seems to be the most straightforward.

upvoted 0 times

...

Georgene

1 year ago

I think option A is the most logical choice.

upvoted 0 times

...

Helga

1 year ago

I agree, option D does sound a bit strange.

upvoted 0 times

...

Lettie

1 year ago

Ha! As if the correct answer could be anything other than A. The NIST guys are all about those 3 P's - PDP, PEP, and PIP. Straight from the source, people!

upvoted 0 times

...

Margot

1 year ago

I agree with Lezlie. The NIST guidelines are clear on this, and A is the way to go.

upvoted 0 times

...

Lezlie

1 year ago

Option A is the correct answer. NIST defines the key mechanisms as PDP, PEP, and PIP. This is the standard approach for policy management in a Zero Trust Architecture.

upvoted 0 times

Justa

1 year ago

It's important to have a clear understanding of these mechanisms to ensure effective policy enforcement in a ZTA.

upvoted 0 times

...

Floyd

1 year ago

Yes, you're right. NIST identifies those as the key components for policy management in a Zero Trust Architecture.

upvoted 0 times

...

Reed

1 year ago

I think the key mechanisms for defining, managing, and enforcing policies in a ZTA are PDP, PEP, and PIP.

upvoted 0 times

...

Lorrie

1 year ago

C) Control, data, and application plane? Somebody's been watching too much Skynet.

upvoted 0 times

...

Wava

1 year ago

A) Yup, the PDP, PEP, and PIP - the holy trinity of zero trust policy management!

upvoted 0 times

Delfina

1 year ago

Raelene: It's important to have a solid foundation for policy management in a Zero Trust Architecture.

upvoted 0 times

...

Raelene

1 year ago

Definitely, those key mechanisms help define, manage, and enforce policies effectively.

upvoted 0 times

...

Keena

1 year ago

I agree, the PDP, PEP, and PIP are crucial for zero trust policy management.

upvoted 0 times

...

Rory

1 year ago

B) Data access, PKI, and IAM - that's the real-world stuff, not some abstract policy points.

upvoted 0 times

Simona

1 year ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Felton

1 year ago

D) Policy engine (PE), policy administrator (PA), and policy broker (PB)

upvoted 0 times

...

Gerri

1 year ago

B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM) - that's the real-world stuff, not some abstract policy points.

upvoted 0 times

...

Chery

1 year ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Charlene

1 year ago

D) What? Policy engine, administrator, and broker? Sounds like something out of a sci-fi movie.

upvoted 0 times

Bette

1 year ago

C) Control plane, data plane, and application plane

upvoted 0 times

...

Douglass

1 year ago

B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM)

upvoted 0 times

...

Marguerita

1 year ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Quentin

1 year ago

I'm not sure, but I think option D) Policy engine (PE), policy administrator (PA), and policy broker (PB) could also be key mechanisms for policies in a ZTA.

upvoted 0 times

...