Tools / Zero Trust Architecture (ZTA) Interview questions
What is a Policy Enforcement Point (PEP)?
A Policy Enforcement Point is the component that sits inline between a subject and a resource and actually carries out the decision the Policy Decision Point makes. It enables, monitors, and can terminate the connection.
A PEP can take many forms: an identity-aware proxy in front of a web app, a gateway in front of an API, or an agent running on an endpoint. What they share is that none of them make policy decisions themselves; they only enforce what the PDP tells them.
Because enforcement is separated from decision-making, a compromised PEP cannot rewrite policy, it can only be told to stop passing traffic.
A Policy Enforcement Point's primary job is to:
If a PEP is compromised, an attacker cannot:
More Related questions...
