A city zero-trust design uses a central policy engine to evaluate access requests while API gateways and VPN concentrators only allow or deny based on that decision. Which roles do those components play?
Select an answer to reveal the explanation.
Short Explanation
One brain decides; the door locks obey. Central policy engine equals PDP. Gateways and VPN boxes that open or slam shut equal PEPs. Do not let every doorway invent its own law.
Full Explanation
In policy-based access architectures, the policy decision point (PDP) evaluates rules and attributes and returns permit or deny (and often obligations). Policy enforcement points (PEPs) sit in the request path—API gateways, proxies, VPN concentrators—and enforce that decision. Separating PDP from PEP enables consistent municipal policy across many enforcement choke points.