Study. uk . com
  1. Home
  2. All questions
  3. Question 197

CISSP study material · question 197 of 500

In the SP 800-207 conceptual model, which component makes and logs the access decision, and which one carries that decision out?

  1. The policy engine decides and logs; the policy administrator executes.
  2. The policy enforcement point decides; the policy engine executes.
  3. The policy administrator decides and logs; the policy engine executes.
  4. The trust algorithm decides; the policy enforcement point logs.
Show the answer

Answer: A. The policy engine decides and logs; the policy administrator executes.

The policy decision point splits into the policy engine, which makes and logs the grant or deny decision, and the policy administrator, which executes it through enforcement points.

Source: NIST SP 800-207 (NIST) — SP 800-207 > 3 Logical Components of Zero Trust Architecture

Challenge yourself on this topic → Study as cards