Study. uk . com
  1. Home
  2. All questions
  3. Question 375

CompTIA Security+ study material · question 375 of 611

NIST divides the zero trust policy decision point into two logical components. Which pair?

  1. Policy engine and policy administrator
  2. Policy enforcement point and policy administrator
  3. Policy engine and device inventory
  4. Policy engine and identity provider
Show the answer

Answer: A. Policy engine and policy administrator

The engine makes and logs the decision; the administrator executes it. The enforcement point is separate.

Source: NIST SP 800-207 (NIST) — SP 800-207 § 3.1 Logical Components of Zero Trust Architecture

Challenge yourself on this topic → Study as cards