CSA Exam CCZT Topic 3 Question 14 Discussion

Actual exam question for CSA's CCZT exam

Question #: 14
Topic #: 3

[All CCZT Questions]

Which approach to ZTA strongly emphasizes proper governance of

access privileges and entitlements for specific assets?

AZTA using device application sandboxing

BZTA using enhanced identity governance

CZTA using micro-segmentation

DZTA using network infrastructure and SDPs
ZTA using enhanced identity governance is an approach to ZTA that strongly emphasizes proper governance of access privileges and entitlements for specific assets. This approach focuses on managing the identity lifecycle, enforcing granular and dynamic policies, and auditing and monitoring access activities. ZTA using enhanced identity governance helps to ensure that only authorized and verified entities can access the protected assets based on the principle of least privilege and the context of the request.
Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 5: Enhanced Identity Governance

Show Suggested Answer

Suggested Answer: B

To ensure an acceptable user experience when implementing SDP, a security architect should collaborate with IT to model and plan the user experience, client software distribution, and device onboarding processes. This is because SDP requires users to install and use client software to access the protected resources, and the user experience may vary depending on the device type, operating system, network conditions, and security policies. By modeling and planning the user experience, the security architect and IT can ensure that the SDP implementation is user-friendly, consistent, and secure.

Reference=Certificate of Competence in Zero Trust (CCZT) - Cloud Security Alliance,Zero Trust Training (ZTT) - Module 7: Network Infrastructure and SDP

by Bulah at Apr 26, 2024, 06:22 PM

Limited Time Offer

25%

Off

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashandra

1 months ago

Enhanced identity governance? More like 'enhanced micromanagement', am I right? But hey, it's the correct answer, so I guess I'll have to deal with it.

upvoted 0 times

Marshall

6 days ago

But it's important for proper access control and security.

upvoted 0 times

...

Adelle

11 days ago

Yeah, enhanced identity governance can feel like micromanagement sometimes.

upvoted 0 times

...

Mila

2 months ago

David

upvoted 0 times

...

Ilene

2 months ago

Network infrastructure and SDPs? Nah, I'd rather focus on who's got access and how much. Enhanced identity governance is the way to go.

upvoted 0 times

Daren

7 days ago

ZTA using micro-segmentation can also help control access based on context.

upvoted 0 times

...

Aja

16 days ago

Enhanced identity governance helps to ensure only authorized entities can access assets.

upvoted 0 times

...

Alica

27 days ago

I agree, focusing on access privileges and entitlements is crucial for security.

upvoted 0 times

...

Bernardine

2 months ago

Device application sandboxing? Sounds like a lot of work. I'll take the enhanced identity governance approach - keeps things tidy and secure.

upvoted 0 times

Rima

18 days ago

I prefer the approach that focuses on managing identities and enforcing policies to keep things secure.

upvoted 0 times

...

Stephen

21 days ago

Yeah, it may require some effort but it's worth it for the security and control it provides.

upvoted 0 times

...

Lera

22 days ago

I prefer the enhanced identity governance approach as well, it's important to have proper governance in place.

upvoted 0 times

...

Silvana

24 days ago

I agree, enhanced identity governance is definitely the way to go for proper access control.

upvoted 0 times

...

Jose

2 months ago

Yeah, it helps keep everything organized and secure without too much hassle.

upvoted 0 times

...

Laurel

2 months ago

I agree, enhanced identity governance is definitely the way to go for proper access control.

upvoted 0 times

...

Omer

3 months ago

Micro-segmentation sounds like a fancy way to say 'slice and dice', but I'm more of a 'keep it simple' kind of gal. Enhanced identity governance is where it's at.

upvoted 0 times