Free CCZT: Certificate of Competence in Zero Trust Exam Questions and Answers

Under NIST SP 800-207, a trust algorithm that computes a confidence value from weighted attributes and compares the result with a configured threshold is called

• AA. Singular
• BB. Score-based
• CC. Criteria-based
• DD. Contextual

In the five-step zero trust design methodology, which activity is performed in the final step, monitor and maintain?

• AA. Inspecting and logging traffic to and from the protect surface and tuning the environment from the findings
• BB. Documenting how traffic moves between users, devices and the protect surface across the network
• CC. Identifying the data, applications, assets and services that must be protected in the environment
• DD. Writing policy that states who or what may access each protect surface and under which conditions

How does a contextual trust algorithm differ from a singular trust algorithm in NIST SP 800-207?

• AA. It also considers the subject's recent access history when evaluating a new request
• BB. It requires every attribute on a configured list to be satisfied before access is granted
• CC. It assigns a numeric value to each attribute and sums the values against a threshold
• DD. It evaluates each request in isolation without regard to earlier requests from the same subject

In NIST SP 800-207, which logical component is responsible for enabling, monitoring and eventually terminating connections between a subject and an enterprise resource?

• AA. Policy administrator (PA)
• BB. Policy enforcement point (PEP)
• CC. Continuous diagnostics and mitigation (CDM) system
• DD. Policy engine (PE)

Which of the following is an example of implicit trust that zero trust seeks to remove?

• AA. A user's session is ended when the device posture reported to the PDP falls below the required level
• BB. A server accepts a request without further checks because it comes from an address inside the corporate LAN
• CC. A contractor is limited to a single application after multi-factor authentication succeeds
• DD. A request is evaluated against policy each time a service account calls an API

The NSTAC report to the President on zero trust addresses zero trust adoption together with which related topic?

• AA. Quantum-resistant cryptography
• BB. Software bill of materials
• CC. Trusted identity management
• DD. Secure cloud migration

In a software defined perimeter, what is the purpose of single packet authorization (SPA)?

• AA. To let the controller advertise available resources to every client on the local network segment
• BB. To keep the accepting host hidden by dropping all traffic until a valid authorization packet is received
• CC. To verify the patch level of the initiating host before the policy engine issues a decision
• DD. To encrypt the full application session between the initiating host and the accepting host

In a traditional perimeter security model, implicit trust is typically granted to a user or device on the basis of which of the following?

• AA. Device posture assessed by an agent at the time of every request
• BB. Successful multifactor authentication performed for each individual session
• CC. A least-privilege role assigned in the access policy for the resource
• DD. Network location inside the corporate perimeter

A team deploys an SDP in front of a payroll server. The gateway protecting the server drops every packet until another component tells it which initiating host to accept. Which component supplies that instruction?

• AA. The accepting host that evaluates the request and the user's entitlements locally
• BB. The directory service that stores group membership and device records for the users
• CC. The SDP controller that authenticates the initiating host and approves the connection
• DD. The initiating host that requests access and presents its credentials to the gateway

Which of the following is one of the five pillars of the CISA Zero Trust Maturity Model?

• AA. Governance
• BB. Automation and Orchestration
• CC. Applications and Workloads
• DD. Visibility and Analytics