Online Access Free ZDTA Exam Questions

How is data gathered with ZDX Advanced client performance?

• A.By using AI predictive analysis ZDX can extrapolate near-term client performance based upon recent past data observed.
• B.By constantly analyzing live user sessions to both Internet and Private applications and measuring the performance of those sessions.
• C.By generating synthetic transactions to designated Internet and Private applications every 5 minutes and measuring the performance of those sessions.
• D.By constantly analyzing live user sessions to critical SaaS applications and measuring the performance of those sessions.

In which of the following SaaS apps can you protect data at rest via Zscaler ' s out-of-band CASB solution?

• A.Facebook.
• B.Yahoo Mail
• C.Twitter.
• D.Google Drive.

A Gold-class SaaS application performs poorly even though its bandwidth class has a generous minimum and moderate maximum. Usage dashboards show available capacity during incidents, and other applications are not saturating the link.
What is the most defensible next step to prevent recurring degradation?

• A.Prioritize streaming media above the SaaS application to normalize queue behavior and reduce circuit jitter
• B.Reduce TLS inspection for the SaaS application to remove inspection latency without first validating the traffic path
• C.Raise the Gold-class maximum to a higher ceiling to address presumed internal throttling
• D.Use ZDX path metrics to validate last-mile or ISP congestion at the affected site and plan a circuit upgrade or provider change while retaining the current policies

Malware Protection inside HTTPS connections is performed using which parts of the Zero Trust Exchange?

• A.Data Loss Protection comparing saved filenames for known risks.
• B.Application Segmentation of users to specific private applications.
• C.TLS Inspection decrypting traffic to compare signatures for known risks.
• D.Deception creating decoy files for malware to discover.

A finance user downloads a password-protected spreadsheet from a sanctioned SaaS platform. Cloud Sandbox indicates that detonation is delayed because the file is encrypted.
Which action should the administrator take next?

• A.Block tenant-wide access to third-party integrations and suspend the finance user's uploads until further notice
• B.Reduce DLP thresholds for the finance department so benign matches are treated as policy violations
• C.Move inspection exclusively to API-based scanning and disable inline controls to avoid workflow interruptions
• D.Configure a File Type Control policy to block unscannable files