ZDTA Practice Questions

A.  

Configure one IPSec tunnel to the regional Service Edge and declare the bandwidth expectation to match the site profile

B.  

Configure one GRE tunnel to a regional Service Edge and bind the location to a static IP to meet the throughput target

C.  

Provision two GRE tunnels to separate Service Edges and balance traffic through policy-based routing

D.  

Establish two IPSec peers with conservative IKE lifetimes to reduce rekey churn and configure the location’s static IP

A.  

An inspection policy relaxed enforcement through HTTP method handling, leaving the session permitted despite the deny.

B.  

A data protection engine recalibrated risk and weakened access control through orchestration overlaps in the stack.

C.  

An earlier allow scoped to the application segment matched due to a trusted network condition, and the later catch-all deny did not evaluate.

D.  

A client forwarding bypass reduced enforcement fidelity and triggered a secondary pass where the deny was sidelined.

A.  

It protects sensitive data from leaving through external channels.

B.  

It protects from potential zero-day threats and advanced persistent threats.

C.  

It protects cloud workloads from lateral movement.

D.  

It protects users from known malicious files and attacks.

A.  

identity Admin Portal

B.  

Mobile Admin Portal

C.  

Experience Center

D.  

One API

A.  

Constrain the rollout to a pilot ring focused on the affected operating system and region, monitor the Client Connector dashboard and ZDX, and revert that segment if failures persist before expanding

B.  

Backhaul traffic from the affected region to headquarters to reduce variability, accepting additional latency and potentially compounding user impact

C.  

Tighten inspection policies across all pilot regions to constrain throughput, accepting degraded experience to stabilize failure patterns

D.  

Accelerate the global rollout to close compliance gaps despite localized instability, relying on post-deployment remediation for the affected cohort

A.  

The relationship between App Connector Groups and Server Groups is established dynamically in the Zero Trust Exchange as users try to access Applications

B.  

When a new Server Group is created it points to the App Connector Groups that provide visibility to this Server Group

C.  

Both App Connector Groups and Server Groups are linked together via the Data Center element

D.  

When you create a new App Connector Group you must select the list of Server Groups to which it provides visibility

A.  

The section of a corporate Location used to separate traffic, like traffic from employees from guest traffic

B.  

The section of a corporate Location that sends traffic to a Subcloud

C.  

Every one of the sections in a Corporate Location that use overlapping IP addresses

D.  

A way to separate generic traffic from that coming from Client Connector

A.  

Prevents Patient Zero Infections

B.  

Reduces identity related risks

C.  

Prevents connections to Embargoed Countries

D.  

Blocks malicious traffic by dropping packets

A.  

It scans only uncompressed files.

B.  

Up to three layers of recursive compression.

C.  

Up to two layers of recursive compression.

D.  

Up to five layers of recursive compression.

A.  

Compare the user risk score with other companies to evaluate users vs other companies.

B.  

Determine whether or not a user is authorized to view unencrypted data.

C.  

Configure stronger user-specific policies to monitor & control user-level risk exposure.

D.  

Determine if a user has been compromised