Tools / Zero Trust Architecture (ZTA) Interview questions
List the key components of the NIST Zero Trust Architecture model (SP 800-207)?
NIST SP 800-207 defines a logical architecture with a core decision-making engine and several supporting data sources that feed it.
| Component | Function |
| Policy Engine (PE) | Calculates the trust decision from policy and signals |
| Policy Administrator (PA) | Executes the PE's decision by instructing the PEP |
| Policy Enforcement Point (PEP) | Enables, monitors, or terminates the connection |
| CDM System | Continuous diagnostics feeding device posture data |
| Threat Intelligence | External risk signals feeding the PE |
| PKI / ID Management | Issues and validates certificates and identities |
These components communicate constantly so that every access decision reflects current, not stale, information.
The Policy Engine's core function is to:
Continuous diagnostics and mitigation (CDM) systems primarily supply:
More Related questions...
