Examkin

Question

Difficulty: EasyZero Trust Architecture Principles

An organization is deploying Zero Trust Architecture (ZTA) across its network infrastructure. When an employee attempts to access a sensitive human resources portal, which functional component is responsible for evaluating the user's identity, device posture, and enterprise policies to determine whether access should be granted?

  1. Policy Decision Point (PDP)Answer
  2. B
    Policy Enforcement Point (PEP)
  3. C
    Implicit Trust Zone
  4. D
    Authentication Authority

Answer

Policy Decision Point (PDP)
The Policy Decision Point (PDP) serves as the logical brain in Zero Trust Architecture. It evaluates access requests against organizational security rules, user attributes, device health, and environmental signals to decide whether access should be allowed or denied.

Step-by-Step Solution

1
Analyze the role required in the scenario
The scenario asks for the component that evaluates policies and contextual signals to make an access determination.
Zero Trust separates policy decision-making from policy enforcement.
2
Map the required functionality to standard Zero Trust architecture components
The Policy Decision Point (PDP) processes input signals against security policies to yield an access decision, whereas the Policy Enforcement Point (PEP) applies that decision to the data connection.
Identifying the PDP as the decision-making brain distinguishes it from enforcement mechanisms.

Key Concept

Policy Decision Point (PDP) in Zero Trust Architecture
Estimated Time:45s
Rate this question

Topics

Zero Trust Architecture Principles

More questions from this topic