ZDTA Practice Questions

A.  

Access Control Services

B.  

Digital Experience Monitoring

C.  

Cyber Security Services

D.  

Platform Services

A.  

Amazon S3

B.  

Webex Teams

C.  

Dropbox

D.  

Google Workspace

A.  

It requires users to restart their Windows workstations after ZCC installation before accessing the internet.

B.  

It prevents users from uninstalling ZCC without proper authorization.

C.  

It requires users to enroll with ZCC before accessing the internet.

D.  

It prevents users from logging out of ZCC without proper authorization.

A.  

1 minute

B.  

10 minutes

C.  

15 minutes

D.  

5 minutes

A.  

Use ISP Insights and geographic latency maps to aggregate experience scores and network-path measurements by provider and region

B.  

Correlate meeting-level mean opinion scores with endpoint CPU spikes and conclude that local resource limitations are constraining audio and video

C.  

Examine individual CloudPath traces for per-hop jitter and packet loss while assuming that the last-mile segment is the bottleneck

D.  

Compare device Wi-Fi measurements with UCaaS quality trends and infer that users’ local networks are responsible

A.  

Out-of-band CASB

B.  

Cloud application control

C.  

URL filtering with SSL inspection

D.  

Endpoint DLP

A.  

Delay updates in every region until vendor remediation is available, accepting prolonged exposure to vulnerabilities fixed in the new version

B.  

Revert the affected segment to the previous version and continue pilots in unaffected cohorts, monitoring the Zscaler Client Connector dashboard and logs for recurrence

C.  

Reassign every group to an earlier stable version regardless of local stability, sacrificing rollout progress and increasing coordination overhead

D.  

Push diagnostic packet-capture collection to the entire user base, accepting a performance impact for unaffected cohorts

A.  

Consult SaaS Security Insights to assess cloud-application exposure and control posture

B.  

Check Administrator Audit Logs to correlate administrative activity with traffic dispositions

C.  

Use Web Insights to trace the transaction, identify the matched web rule, and confirm the action

D.  

Inspect Firewall Insights to review port-based rule evaluations and bandwidth constraints

A.  

Data loss prevention

B.  

Stopping reconnaissance attacks

C.  

DDoS protection

D.  

Log analysis

A.  

Confirm that internal routing permits the App Connector subnets to reach the on-premises application subnets and that App Connector egress to ZPA Service Edges remains outbound TLS over permitted paths

B.  

Confirm that client microtunnels terminate on the AWS App Connectors through inbound firewall rules and that Direct Connect advertises public prefixes

C.  

Confirm that the on-premises firewalls publish NAT to expose the application servers for App Connector probes and that reverse DNS is authoritative in AWS

D.  

Confirm that ZPA control-plane addresses are reachable through inbound ACLs from the Zscaler cloud and that application probes are source-NATed at the data-center edge