Valid CCZT Dumps shared by ExamDiscuss.com for Helping Passing CCZT Exam! ExamDiscuss.com now offer the newest CCZT exam dumps, the ExamDiscuss.com CCZT exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CCZT dumps with Test Engine here:
In a ZTA, what is a key difference between a policy decision point (PDP) and a policy enforcement point (PEP)?
Correct Answer: A
Explanation In a ZTA, a policy decision point (PDP) is a logical component that evaluates the incoming signals from an entity requesting access to a resource against a set of access determination criteria, such as identity, context, device, location, and behavior1. A PDP then makes a decision to grant or deny access, or to request additional information or verification, based on the policies defined by the policy administrator1. A policy enforcement point (PEP) is a logical component that uses the incoming signals from the PDP to open or close a connection between the entity and the resource1. A PEP acts as a gateway or intermediary that enforces the decision made by the PDP and prevents unauthorized or risky access2. References = Zero Trust Architecture | NIST Policy Enforcement Point (PEP) - Pomerium