A regional data center hosts a payroll web application that communicates with a database over TCP port 1433. Recent telemetry shows attempted lateral movement from the compromised payroll web server to unrelated internal services. Contractors also have ZPA access to a separate internal wiki that resides in the same segment as the payroll application.
Which action should the administrator take to refine microsegmentation and reduce risk?
What transport mechanism will Zscaler Client Connector use to forward traffic to the Zero Trust Exchange when configured for Tunnel 2.0?
Which of the following connects Zscaler users to the nearest Microsoft 365 servers for a better experience?
A sequence in the Administrator Audit Log shows several failed sign-ins from an unfamiliar location, followed by a successful administrator sign-in and a near-immediate role upgrade on the same identity.
Which entry combination constitutes the clearest escalation indicator requiring a containment step?
When configuring webhook alerts in ZIA, which two webhook authentication types are supported?
What is the name of the feature that allows the platform to apply URL filtering even when a Cloud App control policy explicitly permits a transaction?
Administrators report that a content-inspection rule is blocking source-code uploads to a sanctioned repository, although uploads should be permitted only for that application and the engineering group.
Which action and policy ownership are most appropriate for addressing the issue?
Audit and access logs show that a user was able to access an application segment even though the user was recently moved into a restricted group referenced by a deny rule.
What is an accurate explanation for the discrepancy?
When creating an installer package or using the command-line for installation, which Zscaler Client Connector installer options are used to automatically redirect to your corporate SAML IdP on launch?
When are users granted conditional access to segmented private applications?
