Does the Cloud Firewall detect evasion techniques that would allow applications to communicate over non- standard ports to bypass its controls?
Answer(s): D
Zscaler's Cloud Firewall leverages Deep Packet Inspection (DPI) to detect protocol-evasion techniques - such as apps tunneling over non-standard ports - and then routes that traffic to the appropriate security engines for inspection and enforcement.
What is Zscaler's rotation policy for intermediate certificate authority certificates?
Answer(s): C
Zscaler's short-lived intermediate CA certificates on the ZIA Service Edges are valid for 14days and are automatically rotated every 7days, minimizing the window of exposure even if a private key is compromised.
Malware Protection inside HTTPS connections is performed using which parts of the Zero Trust Exchange?
Malware Protection for HTTPS traffic relies on the Zero Trust Exchange's TLS Inspection to decrypt the SSL/ TLS stream, enabling the malware-detection engines to scan payloads against known threat signatures.
What are the two types of Probe supported in ZDX?
Answer(s): A
ZDX supports two probe types: Web Probes and Cloud Path Probes. Web Probes actively retrieve web objects to measure application health, while Cloud Path Probes map the end-to-end network path to pinpoint transit issues.
Which Advanced Threats policy can be configured to protect users against a credential attack?
Answer(s): B
By blocking suspected phishing sites in the Advanced Threats policy, you stop users from reaching malicious pages engineered to capture their credentials.
What ports and protocols are forwarded to the Zero Trust Exchange when Zscaler Client Connector is using Tunnel 2.0?
Zscaler Client Connector's Tunnel 2.0 uses a packet-filter based tunnel that encapsulates all IP traffic - both TCP and UDP on any port, plus ICMP - to the Zero Trust Exchange
Which feature does Zscaler Client Connector Z-Tunnel 2.0 enable over Z-Tunnel 1.0?
Z-Tunnel2.0 upgrades over 1.0 by carrying all ports and protocols through the Cloud Firewall for inspection - rather than being limited to just HTTP/HTTPS - ensuring full visibility and control.
The Zscaler platform can protect against malicious files, URLs and content based on a number of criteria including reputation type. What type of checking is virus scanning?
Virus scanning in the Zscaler platform is part of its Malware Protection capability, which inspects file content against known virus signatures and behaviors.
Post your Comments and Discuss Zscaler ZDTA exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the ZDTA content, but please register or login to continue.