CompTIA Security+ SY0-701 (V7) Practice Question

The Policy Engine is the decision-making component of a Zero Trust architecture. It receives contextual information about the subject, device, and requested resource, compares that information to enterprise security policies, and returns an allow, deny, or revoke decision. Enforcement of the decision is performed by the Policy Administrator and the Policy Enforcement Point, not by the Policy Engine itself. The distractors describe logging, authentication services, and routing functions that are unrelated to the Policy Engine's role.