Exclusive Black Friday Deal: 70% Off All Exam Bundles! Use coupon code below to unlock your savings! - Ends in 0d 00h 00m 00s - Coupon code: Friday70

Free Zscaler Digital Transformation Administrator Practice Questions

Question # 11

Is SCIM mandatory for ZIA?

Options:

A.  

No

B.  

Depends

C.  

Yes

D.  

Maybe

Discussion 0
Question # 12

What is an App Profile PAC file used for?

Options:

A.  

It is used to encapsulate traffic within a GRE tunnel.

B.  

It is used to establish a TLS session with the Zscaler cloud.

C.  

It is used by Zscaler Client Connector to make traffic-forwarding decisions.

D.  

It is used to categorize sensitive data.

Discussion 0
Question # 13

Which Advanced Threats policy can be configured to protect users against a credential attack?

Options:

A.  

Configure Advanced Cloud Sandbox policies.

B.  

Block Suspected phishing sites.

C.  

Enable Watering Hole detection.

D.  

Block Windows executable files from uncategorized websites.

Discussion 0
Question # 14

Which options must be selected when configuring Zscaler Client Connector for Strict Enforcement?

Options:

A.  

cloudName and policyToken

B.  

userDomain and deviceToken

C.  

cloudName and deviceToken

D.  

userDomain and policyToken

Discussion 0
Question # 15

Which of the following DLP Notification methods can be used to forward a copy of the data that triggered the DLP policy to the auditor?

Options:

A.  

Email Notification Template

B.  

NSS Log Forwarding to SIEM

C.  

SMS Text Message via PagerDuty

D.  

Zscaler Client Connector pop-up message

Discussion 0
Question # 16

An administrator suspects that users in Europe are being routed to a distant service edge, inflating latency before traffic reaches a SaaS provider.

Which ZDX diagnostic provides evidence of inefficient client-to-service-edge routing?

Options:

A.  

Audit alerting thresholds for regional score drops and assume that the trigger implies service-edge misalignment

B.  

Check endpoint CPU and memory telemetry to argue that device constraints are producing perceived routing inefficiencies

C.  

Review Page Fetch Time graphs for the application and deduce that service-edge selection is suboptimal based on slow loads

D.  

Examine CloudPath probes for the client-to-service-edge leg to verify latency spikes and excessive hop counts

Discussion 0
Question # 17

According to the Zero Trust Exchange Functional Services Diagram, which services does Antivirus belong to?

Options:

A.  

Platform Services

B.  

Access Control Services

C.  

Security Services

D.  

Advanced Threat Prevention Services

Discussion 0
Question # 18

Audit logs show configuration changes performed by members of a group outside its intended administrative area.

Which step reduces this exposure while preserving required functionality?

Options:

A.  

Adjust department classifications to redefine reporting lines for the group

B.  

Switch to just-in-time provisioning only so that attributes are reapplied during every session

C.  

Revise the group’s administrative entitlements and role assignments to constrain its scope according to least privilege

D.  

Relax sign-on policies to reduce failed authentication events across locations

Discussion 0
Question # 19

Which of the following options will protect against Botnet activity using IPS and Yara type content analysis?

Options:

A.  

Command and Control Traffic

B.  

Ransomware

C.  

Trojans

D.  

Adware/Spyware Protection

Discussion 0
Question # 20

A manufacturing firm is merging with a subsidiary that uses a separate identity provider. A ZPA Access Policy for an engineering CAD application uses SCIM groups for authorization. A new administrator authenticates successfully through SAML and presents the Engineering claim, but the subsidiary’s SCIM synchronization is delayed, so the administrator does not appear in the expected group in ZIdentity.

Which action should the ZPA administrator take to avoid inconsistent access while preserving auditability?

Options:

A.  

Reconfigure the policy to use NameID for authorization, accepting reduced traceability of group criteria

B.  

Initiate a SCIM resynchronization and validate the user’s group membership in ZIdentity, while keeping the Access Policy bound to SCIM groups

C.  

Create a local ZIdentity group with provisional engineering membership, accepting drift from the directory of record

D.  

Change identity-provider routing so the engineer authenticates through the parent company’s identity provider, accepting misalignment with the subsidiary’s directory mappings

Discussion 0

ZDTA PDF

ZDTA PDF (Printable)
$46.5
$154.99

ZDTA Testing Engine

ZDTA PDF (Printable)
$51
$169.99

ZDTA PDF + Testing Engine

ZDTA PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions