CSA CCZT Exam - Topic 6 Question 27 Discussion

Actual exam question for CSA's CCZT exam

Question #: 27
Topic #: 6

[All CCZT Questions]

According to NIST, what are the key mechanisms for defining,

managing, and enforcing policies in a ZTA?

APolicy decision point (PDP), policy enforcement point (PEP), and
policy information point (PIP)

BData access policy, public key infrastructure (PKI), and identity and
access management (IAM)

CControl plane, data plane, and application plane

DPolicy engine (PE), policy administrator (PA), and policy broker (PB)

Show Suggested Answer

Suggested Answer: A

According to NIST, the key mechanisms for defining, managing, and enforcing policies in a ZTA are the policy decision point (PDP), the policy enforcement point (PEP), and the policy information point (PIP). The PDP is the component that evaluates the policies and the contextual data collected from various sources and generates an access decision. The PEP is the component that enforces the access decision on the resource. The PIP is the component that provides the contextual data to the PDP, such as the user identity, the device posture, the network location, the resource attributes, and the environmental factors.

Reference=

Zero Trust Architecture Project - NIST Computer Security Resource Center, slide 9

What Is Zero Trust Architecture (ZTA)? - F5, section ''Policy Engine''

Zero Trust Frameworks Architecture Guide - Cisco, page 4, section ''Policy Decision Point''

by Louvenia at Sep 13, 2024, 01:44 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rex

6 months ago

A is spot on, can’t argue with NIST!

upvoted 0 times

...

Luis

6 months ago

I’m not sure about D, seems a bit too niche.

upvoted 0 times

...

James

6 months ago

Wait, is C even a thing in ZTA? Sounds off.

upvoted 0 times

...

Viva

7 months ago

I think B has some relevance too, especially with IAM.

upvoted 0 times

...

Bea

7 months ago

Definitely A, those are the core components!

upvoted 0 times

...

Thurman

7 months ago

I vaguely recall something about control planes from a previous study session, so C could be a possibility, but I’m not certain how it fits into ZTA specifically.

upvoted 0 times

...

Lemuel

7 months ago

I’m leaning towards B because it mentions IAM, which is crucial for managing identities, but I’m not confident about the other components.

upvoted 0 times

...

Stefany

7 months ago

I remember practicing a question about ZTA policies, and I feel like option D sounds familiar, but I can't recall the exact roles of the policy engine and administrator.

upvoted 0 times

...

Lynelle

8 months ago

I think the answer might be A, but I'm not entirely sure about the definitions of PDP, PEP, and PIP.

upvoted 0 times

...

Theron

8 months ago

I'm a bit confused by all the acronyms in these options. I know zero trust is an important security model, but the specific NIST mechanisms are not something I've studied in depth. I'll have to review my notes and see if I can piece this together.

upvoted 0 times

...

Marquetta

8 months ago

Hmm, I'm not totally sure about this one. The options seem a bit technical and I'm not super familiar with the NIST zero trust terminology. I'll have to think this through carefully.

upvoted 0 times

...

Lashawnda

8 months ago

I think the key mechanisms are the policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP) mentioned in option A. That sounds like the NIST framework for defining, managing, and enforcing policies in a zero trust architecture.

upvoted 0 times

...

Cecily

8 months ago

Option A looks like the right answer to me. The PDP, PEP, and PIP are the core components that NIST describes for implementing policy management in a zero trust environment. I feel pretty confident about this one.

upvoted 0 times

...

Melodie

8 months ago

Whew, this is a lot of information to sift through. But I think if I methodically go through each cost item and determine its relevance, I should be able to arrive at the correct total relevant cost.

upvoted 0 times

...

Alline

2 years ago

Option D sounds like it was made up by someone who just threw random words together. PB? Really? I'll stick with A, the one that actually makes sense.

upvoted 0 times

Bulah

2 years ago

Definitely going with A, it just makes sense.

upvoted 0 times

...

Franchesca

2 years ago

Yeah, A seems to be the most straightforward.

upvoted 0 times

...

Georgene

2 years ago

I think option A is the most logical choice.

upvoted 0 times

...

Helga

2 years ago

I agree, option D does sound a bit strange.

upvoted 0 times

...

Lettie

2 years ago

Ha! As if the correct answer could be anything other than A. The NIST guys are all about those 3 P's - PDP, PEP, and PIP. Straight from the source, people!

upvoted 0 times

...

Margot

2 years ago

I agree with Lezlie. The NIST guidelines are clear on this, and A is the way to go.

upvoted 0 times

...

Lezlie

2 years ago

Option A is the correct answer. NIST defines the key mechanisms as PDP, PEP, and PIP. This is the standard approach for policy management in a Zero Trust Architecture.

upvoted 0 times

Justa

2 years ago

It's important to have a clear understanding of these mechanisms to ensure effective policy enforcement in a ZTA.

upvoted 0 times

...

Floyd

2 years ago

Yes, you're right. NIST identifies those as the key components for policy management in a Zero Trust Architecture.

upvoted 0 times

...

Reed

2 years ago

I think the key mechanisms for defining, managing, and enforcing policies in a ZTA are PDP, PEP, and PIP.

upvoted 0 times

...

Lorrie

2 years ago

C) Control, data, and application plane? Somebody's been watching too much Skynet.

upvoted 0 times

...

Wava

2 years ago

A) Yup, the PDP, PEP, and PIP - the holy trinity of zero trust policy management!

upvoted 0 times

Delfina

2 years ago

Raelene: It's important to have a solid foundation for policy management in a Zero Trust Architecture.

upvoted 0 times

...

Raelene

2 years ago

Definitely, those key mechanisms help define, manage, and enforce policies effectively.

upvoted 0 times

...

Keena

2 years ago

I agree, the PDP, PEP, and PIP are crucial for zero trust policy management.

upvoted 0 times

...

Rory

2 years ago

B) Data access, PKI, and IAM - that's the real-world stuff, not some abstract policy points.

upvoted 0 times

Simona

2 years ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Felton

2 years ago

D) Policy engine (PE), policy administrator (PA), and policy broker (PB)

upvoted 0 times

...

Gerri

2 years ago

B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM) - that's the real-world stuff, not some abstract policy points.

upvoted 0 times

...

Chery

2 years ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Charlene

2 years ago

D) What? Policy engine, administrator, and broker? Sounds like something out of a sci-fi movie.

upvoted 0 times

Bette

2 years ago

C) Control plane, data plane, and application plane

upvoted 0 times

...

Douglass

2 years ago

B) Data access policy, public key infrastructure (PKI), and identity and access management (IAM)

upvoted 0 times

...

Marguerita

2 years ago

A) Policy decision point (PDP), policy enforcement point (PEP), and policy information point (PIP)

upvoted 0 times

...

Quentin

2 years ago

I'm not sure, but I think option D) Policy engine (PE), policy administrator (PA), and policy broker (PB) could also be key mechanisms for policies in a ZTA.

upvoted 0 times

...