Tools / Zero Trust Architecture (ZTA) Interview questions
What is the trust broker or control plane in Zero Trust?
The trust broker, or control plane, is the logically centralized authority that holds policy, orchestrates authentication, and issues short-lived credentials such as tokens or certificates to enforcement points. It corresponds to the PDP in NIST's terminology.
It is kept separate from the data plane, the components that actually forward already-authorized traffic, such as proxies and gateways. The data plane only enforces what the control plane has decided; it holds no policy authority of its own.
This separation means a compromised data-plane component cannot mint new access or rewrite policy, it can, at worst, be told to stop passing traffic, containing the impact of that compromise.
The control plane in Zero Trust is responsible for:
A compromised data-plane component cannot, by design:
More Related questions...
