Cisco defines Zero Trust Network Access as verifying users and devices and granting access to specific applications according to identity and context policies. Identity policy determines who or what is making the request through attributes such as user, group, authentication strength, and device identity. Context policy evaluates the circumstances of the request, which can include device posture, location, risk, time, and other trust signals. Together, these policies let the trust broker make a least-privilege, per-application decision and re-evaluate it when conditions change. “Site-to-site” and “remote access” describe connectivity models rather than ZTNA policy types. “Access” describes the resulting authorization or may label a product policy container, but the two policy categories stated in Cisco’s ZTNA definition are identity and context. Therefore, the correct choices are A and D. Cisco ZTNA overview