Exclusive Black Friday Deal: 70% Off All Exam Bundles! Use coupon code below to unlock your savings! - Ends in 0d 00h 00m 00s - Coupon code: Friday70

Free Zscaler Digital Transformation Administrator Practice Questions

Question # 81

An organization wants to let a contractor group reach a single internal web application while restricting access to all other private resources. The team needs the policy to reflect contractor group-membership changes during normal operations and to ensure device risk is accounted for per session.

Which configuration most effectively enforces least privilege in this case?

Options:

A.  

Define a dedicated App Segment for the target application and use a ZPA Access Policy that references a SCIM-synchronized contractor group with a device posture condition.

B.  

Apply a user-agent-filtered allow control for the application hostname and add a time-based constraint during working hours.

C.  

Create a location-scoped allow rule tied to the contractor egress IP range and monitor downstream access through audit reports.

D.  

Enable a department-based SAML attribute in a broad allow rule and rely on a later block rule to curb lateral access.

Discussion 0

ZDTA PDF

ZDTA PDF (Printable)
$46.5
$154.99

ZDTA Testing Engine

ZDTA PDF (Printable)
$51
$169.99

ZDTA PDF + Testing Engine

ZDTA PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions