Free Zscaler ZDTA Exam Questions

Question 1

An organization has more than one ZIA instance, each on different clouds. The organization is using the same login domain for both and upon login users are given this menu in ZCC asking which cloud they would like to join. What steps could an Administrator take to avoid having this menu appear?

A : Customize an MSI version of the ZCC file specifying the USERDOMAIN variable.

B : Customize an MSI version of the ZCC file specifying the CLOUDNAME variable.

C : Federate the login domain between two different IDP instances.

D : Create only one SAML integration with the desired ZIA instance.

Answer: B

Question 2

Which of the following connects Zscaler users to the nearest Microsoft 365 servers for a better experience?

A : Single DNS resolver with forwarders providing centralized results

B : Private MPLS in each branch office providing connection

C : Multiple distributed DNS resolvers providing local results

D : Optimized TCP Scaling for maximum throughput of files

Answer: C

Question 3

What mechanism identifies the ZIA Service Edge node that the Zscaler Client Connector should connect to?

A : The IP ranges included/excluded in the App Profile

B : The PAC file used in the Forwarding Profile

C : The PAC file used in the Application Profile

D : The Machine Key used in the Application Profile

Answer: C

Question 4

An organization has more than one ZIA instance, each on different clouds. The organization is using the same login domain for both and upon login users are given this menu in ZCC asking which cloud they would like to join. What steps could an Administrator take to avoid having this menu appear?

A : Customize an MSI version of the ZCC file specifying the USERDOMAIN variable.

B : Customize an MSI version of the ZCC file specifying the CLOUDNAME variable.

C : Federate the login domain between two different IDP instances.

D : Create only one SAML integration with the desired ZIA instance.

Answer: B

Question 5

What enables zero trust to be properly implemented and enforced between an originator and the destination application?

A : Trusted network criteria designate the locations of originators which can be trusted.

B : Access is granted without sharing the network between the originator and the destination application.

C : Cloud firewall policies ensure that only authenticated users are allowed access to destination applications.

D : Connectivity between the originator and the destination application is over IPSec tunnels.

Answer: B