Tools / Zero Trust Architecture (ZTA) Interview questions
What is a Policy Decision Point (PDP) in Zero Trust?
A Policy Decision Point is the brain of a Zero Trust deployment. In NIST SP 800-207 terms, it combines a Policy Engine, which calculates the actual trust decision using policy rules and contextual signals, with a Policy Administrator, which turns that decision into an executable instruction.
When a subject requests access to a resource, the PDP collects identity, device posture, resource sensitivity, and threat intelligence inputs, evaluates them against policy, and returns an allow, deny, or step-up decision.
The PDP itself never touches the data path. It only decides; enforcement is delegated to a separate component.
The Policy Decision Point is composed of:
The PDP's role in the data path is to:
More Related questions...
