最新的Zscaler ZDTA免費考試真題

問題1

What does the user risk score enable a user to do?

A. Determine if a user has been compromised

B. Compare the user risk score with other companies to evaluate users vs other companies.

C. Configure stronger user-specific policies to monitor & control user-level risk exposure.

D. Determine whether or not a user is authorized to view unencrypted data.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題2

Policy troubleshooting identifies inconsistent enforcement across web and private-application channels for a regulated data type. The inconsistency causes inefficient investigations and intermittent blocking.
Which action would most plausibly improve platform performance under this policy framework?

A. Create separate custom rules for each channel to isolate false positives despite using different classification references

B. Segment enforcement by department so identical data types can be handled differently without policy overlap

C. Align the policies to shared DLP engines and classification labels, with clearly defined precedence to eliminate cross-channel conflicts

D. Reduce detection scope for private applications and prioritize web controls to minimize cross-channel matches

正確答案: C

說明：（僅 Fast2test 成員可見）

問題3

A company observes risky uploads from unmanaged devices connecting over public Wi-Fi to cloud storage.
The devices intermittently fail posture checks, and logs show inconsistent category enforcement.
Which action places the stricter control where it will be applied consistently to off-network traffic?

A. Attach tenant-restriction profiles to a limited set of users in CASB and rely on inherited group mappings to constrain cloud activity

B. Add connector-level ZPA policies that restrict FQDNs for storage endpoints and deny remote TCP ports used by synchronization clients

C. Create a ZIA rule set scoped to roaming users and unauthenticated sessions, positioned early in the policy order to enforce stronger Cloud App Control and URL Filtering

D. Deploy branch bandwidth classes that shape storage traffic in sublocations to reduce large upload attempts from remote users

正確答案: C

說明：（僅 Fast2test 成員可見）

問題4

An administrator would like users to be able to use the corporate instance of a SaaS application. Which of the following allows an administrator to make that distinction?

A. Endpoint DLP

B. Cloud application control

C. URL filtering with SSL inspection

D. Out-of-band CASB

正確答案: B

說明：（僅 Fast2test 成員可見）

問題5

While troubleshooting a user ' s slow application access, can a ZDX administrator see degradations in Wi-Fi signal strength?

A. Yes. but the current Wi-Fi signal strength is only displayed when doing a deep trace.

B. No, ZDX only works on hardwired devices.

C. Yes, the Wi-Fi hop latency is shown on a cloud path probe.

D. Yes, a low Wi-Fi signal may be seen in either the results of a Cloud Path Probe or in the device health Wi-Fi signal indicator.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題6

You ' ve configured the API connection to automatically download Microsoft Information Protection (MIP) labels into ZIA; where will you use these imported labels to protect sensitive data in motion?

A. Creating a File Type Control Policy.

B. Creating a SaaS Security Posture Control Policy.

C. Creating a custom DLP Policy.

D. Creating a custom DLP Dictionary

正確答案: C

說明：（僅 Fast2test 成員可見）

問題7

How frequently does the Zscaler Client Connector typically check for updates to policy, forwarding, and administration settings?

A. Every 90 minutes

B. Every 120 minutes

C. Every 80 minutes

D. Every 60 minutes

正確答案: D

說明：（僅 Fast2test 成員可見）

問題8

A sequence in the Administrator Audit Log shows several failed sign-ins from an unfamiliar location, followed by a successful administrator sign-in and a near-immediate role upgrade on the same identity.
Which entry combination constitutes the clearest escalation indicator requiring a containment step?

A. A successful administrative sign-in from an untrusted IP address promptly followed by role elevation on the same account session

B. A successful sign-in by a read-only auditor from a branch office and a subsequent group-membership cleanup with a comment

C. Multiple lockout events for a non-administrator account and a later unremarkable sign-in from a corporate VPN

D. Two expired-token errors for an API client and a later password change logged with a documented request ID

正確答案: A

說明：（僅 Fast2test 成員可見）

問題9

What is a Landmine in Deception?

A. Agentless plug-in installed on endpoints, such as desktops or laptops on a network. These plug-ins deploy decoy credentials, files, processes, and lures to other decoys at endpoints.

B. Software agent installed on endpoints, such as desktops or laptops on a network. These agents deploy decoy credentials, files, processes, and lures to other decoys at endpoints.

C. Software agent installed on a centralized server in datacenter or in cloud. The agents running in the server deploy decoy credentials, files, processes, and lures to other decoys at endpoints.

D. Agentless plug-in installed on endpoints, such as desktops or laptops on a network. These plug-ins auto rotates decoy credentials, files, processes, and lures to other decoys at endpoints.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題10

Zscaler forwards the server SSL/TLS certificate directly to the user ' s browser session in which situation?

A. When traffic is exempted in SSL Inspection policy rules.

B. When traffic contains a known threat signature.

C. When user has connected to server in the past.

D. When web traffic is on custom TCP ports.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題11

Is SCIM mandatory for ZIA?

A. Maybe

B. No

C. Yes

D. Depends

正確答案: B

說明：（僅 Fast2test 成員可見）

問題12

A user authenticates through an IdP. The SAML assertion and SCIM provisioning return different group memberships.
Which placement and policy-evaluation outcome ensures the most consistently up-to-date results?

A. Place the user into a transient session group based on MFA, evaluated against ZIA Firewall rules that map Entity ID to service entitlements.

B. Place the user into the IdP Entity ID-specific realm, evaluated against ZPA policies that derive access primarily from the department attribute.

C. Place the user into SCIM-synchronized groups that drive ZIA and ZPA service entitlements, evaluated with SAML and SCIM attributes in the Policy Framework.

D. Place the user in a local ZIdentity group inferred from NameID, evaluated against ZIA policies that prioritize session MFA status over SCIM groups.

正確答案: C

問題13

A threat actor's command-and-control infrastructure uses hard-coded IP addresses and several domains resolved through DNS. An organization wants Zscaler to block callback attempts with minimal dependence on endpoint agents and to enforce the decision consistently for roaming users.
Which configuration best aligns with ZIA policy enforcement and the zero-trust model?

A. Add the domains to a URL-category override and depend on TLS inspection to identify the traffic after connection

B. Create a high-risk URL Filtering rule that reduces the Advanced Threat Protection risk threshold and relies on page scoring to suppress suspicious domains

C. Create a Cloud Firewall destination group containing the indicator IP addresses and apply a high- priority Drop rule, while adding the domains to a globally blocked custom URL category

D. Enable Browser Isolation for the suspected destinations so sessions are rendered remotely even when callbacks reach the external hosts

正確答案: C

說明：（僅 Fast2test 成員可見）

問題14

What is the recommended default rule for the cloud-gen firewall configuration when deploying a new ZIA tenant?

A. Permit all traffic

B. Allow only web traffic (ports 80/443)

C. Block all traffic

D. Disable the firewall

正確答案: C

說明：（僅 Fast2test 成員可見）

最新的Zscaler Digital Transformation Administrator - ZDTA免費考試真題

聯系我們

站內鏈接

最新更新