Zscaler Digital Transformation Administrator (ZDTA) Free Practice Test

Question 1

Which Advanced Threats policy can be configured to protect users against a credential attack?

A. Configure Advanced Cloud Sandbox policies.

B. Block Windows executable files from uncategorized websites.

C. Block Suspected phishing sites.

D. Enable Watering Hole detection.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is the name of the feature that allows the platform to apply URL filtering even when a Cloud App control policy explicitly permits a transaction?

A. Allow and Quarantine

B. Allow URL Filtering

C. Allow Cascading

D. Allow and Scan

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

How is the relationship between App Connector Groups and Server Groups created?

A. When a new Server Group is created it points to the App Connector Groups that provide visibility to this Server Group

B. Both App Connector Groups and Server Groups are linked together via the Data Center element

C. When you create a new App Connector Group you must select the list of Server Groups to which it provides visibility

D. The relationship between App Connector Groups and Server Groups is established dynamically in the Zero Trust Exchange as users try to access Applications

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What does the user risk score enable a user to do?

A. Determine if a user has been compromised

B. Compare the user risk score with other companies to evaluate users vs other companies.

C. Determine whether or not a user is authorized to view unencrypted data.

D. Configure stronger user-specific policies to monitor & control user-level risk exposure.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Zscaler Advanced Threat Protection (ATP) is a key capability within Zscaler Internet Access (ZIA), protecting users against attacks such as phishing. Which of the following is NOT part of the ATP workflow?

A. Preventing the download of a password protected zip file

B. Comprehensive URL categories for newly registered domains

C. IPS coverages for client-side and server-side

D. Reporting high latency from the CEO's Teams call due to a low Wi-Fi signal

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

When configuring Zscaler Private Access, what is the function of the Server Group?

A. Maps App Connector Groups to Application Segments

B. Maps Applications to Application Groups

C. Maps FQDNs to IP Addresses

D. Maps Applications to FQDNs

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which Zscaler feature detects whether an intruder is accessing your internal resources?

A. Browser Isolation

B. SSL Decryption Bypass

C. Deception

D. SandBox

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

When configuring an inline Data Loss Prevention policy with content inspection, which of the following are used to detect data, allow or block transactions, and notify your organization's auditor when a user's transaction triggers a DLP rule?

A. DLP engines

B. VPN Credentials

C. Index Tool

D. Hosted PAC Files

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which of the following statements accurately reflects Zscaler's file size limitation for Malware Protection scans?

A. Zscaler scans files up to 500 MB

B. Zscaler scans all files regardless of size.

C. Zscaler scans files only if they are below 100 MB.

D. Zscaler scans files up to 400 MB.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

What is the default timer in ZDX Advanced for web probes to be sent?

A. 10 minutes

B. 5 minutes

C. 1 minute

D. 30 minutes

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

If you're migrating from an on-premises proxy, you will already have a proxy setting configured within the browser or within the system. With Tunnel Mode, the best practice is to configure what type of proxy configuration?

A. Enforce no Proxy Configuration.

B. Use Web Proxy Auto Discovery (WPAD) to auto-configure the proxy.

C. Execute a GPO update to retrieve the proxy settings from AD.

D. Use an automatic configuration script (forwarding PAC file).

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Which of the following is an unsupported tunnel type?

A. HTTP Connect Tunnels

B. Generic Routing and Encapsulation (GRE)

C. Proprietary Microtunnels

D. Secure Socket Tunneling Protocol (SSTP)

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Zscaler Digital Transformation Administrator (ZDTA) Free Practice Test