Online Access Free CCZT Exam Questions

Which component in a ZTA is responsible for deciding whether to
grant access to a resource?

• A.The policy component
• B.The policy engine (PE)
• C.The policy administrator (PA)
• D.The policy enforcement point (PEP)

In a ZTA, what is a key difference between a policy decision point
(PDP) and a policy enforcement point (PEP)?

• A.A PDP measures incoming control plane authentication signals. A
  PEP measures incoming data plane authorization signals.
• B.A PDP measures incoming signals against a set of access
  determination criteria. A PEP uses incoming signals to open or close a
  connection.
• C.A PDP measures incoming signals in an untrusted zone. A PEP
  measures incoming signals in an implicit trust zone.
• D.A PDP measures incoming signals and makes dynamic risk
  determinations. A PEP uses incoming signals to make static risk
  determinations.

To ensure an acceptable user experience when implementing SDP, a
security architect should collaborate with IT to do what?

• A.Advise IT stakeholders that the security team will fully manage all aspects of the SDP rollout.
• B.Model and plan the user experience, client software distribution,
  and device onboarding processes.
• C.Plan to release SDP as part of a single major change or a "big-bang" implementation.
• D.Build the business case for SDP, based on cost modeling and
  business value.

SDP features, like multi-factor authentication (MFA), mutual
transport layer security (mTLS), and device fingerprinting, protect
against

• A.domain name system (DNS) poisoning
• B.certificate forgery
• C.phishing
• D.code injections

When kicking off ZT planning, what is the first step for an
organization in defining priorities?

• A.Identifying the data and assets
• B.Define the scope
• C.Determine current state
• D.Define a business case