A financial technology organization is refactoring its internal microservices communication architecture to align with Zero Trust Architecture (ZTA) principles. An application security architect specifies that internal services must no longer trust incoming network traffic based on IP subnets or internal network placement. Instead, every request must be dynamically evaluated against contextual security policies and session health attributes before access is granted. Which logical component within the Zero Trust framework is directly responsible for evaluating these access policies and rendering the authorization decision?
- Policy Decision Point (PDP)Cevap
- BPolicy Enforcement Point (PEP)
- CPerimeter Next-Generation Firewall (NGFW)
- DEndpoint Detection and Response (EDR) Agent
Cevap
The Policy Decision Point (PDP) is the component responsible for evaluating access policies and rendering authorization decisions.
The Policy Decision Point (PDP) is the ultimate decision-making component in a Zero Trust Architecture. It receives contextual telemetry (such as user identity, device posture, and risk factors), compares it against enterprise security policies, and outputs an authorization determination.
Adım Adım Çözüm
Anahtar Kavram
Zero Trust Policy Decision Point (PDP) vs Policy Enforcement Point (PEP)