CCZT 試験問題を無料オンラインアクセス

What should an organization's data and asset classification be based on?

• A.Location of data
• B.Recovery of data
• C.Sensitivity of data
• D.History of data

In a ZTA, what is a key difference between a policy decision point
(PDP) and a policy enforcement point (PEP)?

• A.A PDP measures incoming signals against a set of access
  determination criteria. A PEP uses incoming signals to open or close a
  connection.
• B.A PDP measures incoming signals and makes dynamic risk
  determinations. A PEP uses incoming signals to make static risk
  determinations.
• C.A PDP measures incoming signals in an untrusted zone. A PEP
  measures incoming signals in an implicit trust zone.
• D.A PDP measures incoming control plane authentication signals. A
  PEP measures incoming data plane authorization signals.

Which component in a ZTA is responsible for deciding whether to
grant access to a resource?

• A.The policy component
• B.The policy administrator (PA)
• C.The policy engine (PE)
• D.The policy enforcement point (PEP)

According to NIST, what are the key mechanisms for defining,
managing, and enforcing policies in a ZTA?

• A.Data access policy, public key infrastructure (PKI), and identity and access management (IAM)
• B.Policy decision point (PDP), policy enforcement point (PEP), and
  policy information point (PIP)
• C.Policy engine (PE), policy administrator (PA), and policy broker (PB)
• D.Control plane, data plane, and application plane

What steps should organizations take to strengthen access
requirements and protect their resources from unauthorized access
by potential cyber threats?

• A.Update controls for assets impacted by ZT
• B.Identify the relevant architecture capabilities and components that
  could impact ZT
• C.Implement user-based certificates for authentication
• D.Understand and identify the data and assets that need to be
  protected