ZDTA EVALUATION EXAMS ANSWERS AND
QUESTIONS SET A+
✔✔Purpose of Zscaler's Platform Services in the Zero Trust Exchange - ✔✔To provide
fundamental capabilities that interact with other services within the Zero Trust Exchange
and to configure Zscaler's Platform Services as they relate to best practices.
✔✔Service suites interacting with Zscaler's Platform Services - ✔✔Connectivity, Access
Control, Security, and Digital Experience.
✔✔Device Posture in Zscaler's Platform Services - ✔✔It is part of the platform services
suite that consumes posture from other functionalities in the Zero Trust Exchange, such
as Browser Access and Zscaler Client Connector.
✔✔SAML response related to Device Posture - ✔✔Device Attributes.
✔✔Information provided by Device Posture based on SAML response - ✔✔Device
management status, compliance with corporate policy, and whether the device is
managed by Intune or another system like SCCM.
✔✔TLS Inspection in Zscaler's Platform Services - ✔✔Inspection of content to apply
various Access Control, Cyber Protection, and Data Protection functionalities based on
the content of encrypted communications.
✔✔Percentage of TLS traffic Zscaler decrypts and inspects - ✔✔100%.
✔✔Assurance provided by Zscaler with TLS Inspection - ✔✔Optimal cipher selection
and key safeguards.
✔✔Risk mitigated by Zscaler through TLS Inspection - ✔✔Any access risk.
✔✔Measurable aspects with Zscaler's TLS Inspection - ✔✔Coverage, value, and gain
instant awareness.
,✔✔First facet of how TLS inspection works in the Zero Trust Exchange - ✔✔Access
Control—applying policy based on the request and the response.
✔✔Second facet of TLS Inspection regarding compromise - ✔✔Inspecting the payload
for malware, antivirus, Advanced Threat Protection, IPS signature, and cloud sandbox
functionality.
✔✔Third facet of TLS Inspection regarding Data Loss - ✔✔Inline DLP scanning to
prevent data leakage and providing Granular Application Controls.
✔✔Scalability of Zscaler's platform regarding SSL transactions - ✔✔It's scalable,
assuming 100% of transactions will be SSL and could be decrypted.
✔✔Consequences without TLS Inspection - ✔✔Security controls are blind to malicious
payloads, data leakage, and emerging threats.
✔✔Necessity of TLS Inspection for corporate devices accessing the internet - ✔✔To
prevent major security breaches by inspecting encrypted HTTPS transactions.
✔✔TLS Inspection - ✔✔Security controls are blind to malicious payloads, data leakage,
and emerging threats without it.
✔✔Importance of TLS Inspection - ✔✔Necessary for corporate devices accessing the
internet to prevent major security breaches by inspecting encrypted HTTPS
transactions.
✔✔Visible Information in Encrypted HTTPS - ✔✔Only the Server or Domain Name is
visible without inspection.
✔✔Decrypted HTTPS Transaction Visibility - ✔✔HTTP Headers, Request and
Response Headers, Full Request URL, Request Method, and all of the Payload become
visible when decrypted.
✔✔Private Service Edges in Zscaler - ✔✔They are a fundamental capability that
supports secure, direct connections to internal applications.
✔✔Configuration in Zscaler's Platform Services - ✔✔The fundamental set of
capabilities, such as policy frameworks, TLS inspection parameters, and device posture
settings can be configured.
✔✔Zscaler's Device Posture Integration - ✔✔It consumes posture information from
other functionalities like Browser Access and Zscaler Client Connector.
, ✔✔Policy Frameworks in Zscaler - ✔✔They allow for the construction, consumption,
and passing of policy to various functions like Connectivity, Access Control, Security,
and Digital Experience.
✔✔Zscaler's Analytics & Reporting - ✔✔Provides insights and data to measure
coverage, value, and troubleshoot issues.
✔✔Intermediate Certificates in TLS Inspection - ✔✔Generated at line speed for all
users and locations, ensuring the best security and data protection outcomes.
✔✔Granular Application Controls - ✔✔Controls applied not just on the FQDN or URL
but across the entire URI being connected to.
✔✔Zscaler Client Connector in Device Posture - ✔✔Helps in assessing the posture of a
device by integrating with the Connectivity Services suite.
✔✔Identity Integration in Device Posture - ✔✔Helps in determining device attributes
through SAML authentication requests.
✔✔Device Compliance in Device Posture - ✔✔Ensures that the device adheres to
corporate policies, which is necessary for applying security policies.
✔✔ZIA in SSL Inspection - ✔✔Zscaler Internet Access (ZIA) is a forward proxy
performing SSL man-in-the-middle inspection.
✔✔ZIA SSL Certificate Handling - ✔✔Generates a certificate on the fly, signed by a
trusted issuer, and provides it back to the client.
✔✔ZPA in SSL Inspection - ✔✔Zscaler Private Access (ZPA) acts as a reverse proxy,
becoming the web server that the user connects to.
✔✔ZPA SSL Certificate Handling - ✔✔The App Connector or the ZPA Service Edge
provides a real service certificate back to the client.
✔✔Identifying SSL Inspection by Zscaler - ✔✔Clients can check the certificate chain
within their browser session to see which certificate is being used.
✔✔Primary Purpose of SSL Inspection - ✔✔To ensure business security by preventing
malware infections and data leaks.
✔✔Legal and Privacy Teams Buy-in for SSL Inspection - ✔✔Ensures understanding
and agreement on the necessity of SSL inspection for business security.
QUESTIONS SET A+
✔✔Purpose of Zscaler's Platform Services in the Zero Trust Exchange - ✔✔To provide
fundamental capabilities that interact with other services within the Zero Trust Exchange
and to configure Zscaler's Platform Services as they relate to best practices.
✔✔Service suites interacting with Zscaler's Platform Services - ✔✔Connectivity, Access
Control, Security, and Digital Experience.
✔✔Device Posture in Zscaler's Platform Services - ✔✔It is part of the platform services
suite that consumes posture from other functionalities in the Zero Trust Exchange, such
as Browser Access and Zscaler Client Connector.
✔✔SAML response related to Device Posture - ✔✔Device Attributes.
✔✔Information provided by Device Posture based on SAML response - ✔✔Device
management status, compliance with corporate policy, and whether the device is
managed by Intune or another system like SCCM.
✔✔TLS Inspection in Zscaler's Platform Services - ✔✔Inspection of content to apply
various Access Control, Cyber Protection, and Data Protection functionalities based on
the content of encrypted communications.
✔✔Percentage of TLS traffic Zscaler decrypts and inspects - ✔✔100%.
✔✔Assurance provided by Zscaler with TLS Inspection - ✔✔Optimal cipher selection
and key safeguards.
✔✔Risk mitigated by Zscaler through TLS Inspection - ✔✔Any access risk.
✔✔Measurable aspects with Zscaler's TLS Inspection - ✔✔Coverage, value, and gain
instant awareness.
,✔✔First facet of how TLS inspection works in the Zero Trust Exchange - ✔✔Access
Control—applying policy based on the request and the response.
✔✔Second facet of TLS Inspection regarding compromise - ✔✔Inspecting the payload
for malware, antivirus, Advanced Threat Protection, IPS signature, and cloud sandbox
functionality.
✔✔Third facet of TLS Inspection regarding Data Loss - ✔✔Inline DLP scanning to
prevent data leakage and providing Granular Application Controls.
✔✔Scalability of Zscaler's platform regarding SSL transactions - ✔✔It's scalable,
assuming 100% of transactions will be SSL and could be decrypted.
✔✔Consequences without TLS Inspection - ✔✔Security controls are blind to malicious
payloads, data leakage, and emerging threats.
✔✔Necessity of TLS Inspection for corporate devices accessing the internet - ✔✔To
prevent major security breaches by inspecting encrypted HTTPS transactions.
✔✔TLS Inspection - ✔✔Security controls are blind to malicious payloads, data leakage,
and emerging threats without it.
✔✔Importance of TLS Inspection - ✔✔Necessary for corporate devices accessing the
internet to prevent major security breaches by inspecting encrypted HTTPS
transactions.
✔✔Visible Information in Encrypted HTTPS - ✔✔Only the Server or Domain Name is
visible without inspection.
✔✔Decrypted HTTPS Transaction Visibility - ✔✔HTTP Headers, Request and
Response Headers, Full Request URL, Request Method, and all of the Payload become
visible when decrypted.
✔✔Private Service Edges in Zscaler - ✔✔They are a fundamental capability that
supports secure, direct connections to internal applications.
✔✔Configuration in Zscaler's Platform Services - ✔✔The fundamental set of
capabilities, such as policy frameworks, TLS inspection parameters, and device posture
settings can be configured.
✔✔Zscaler's Device Posture Integration - ✔✔It consumes posture information from
other functionalities like Browser Access and Zscaler Client Connector.
, ✔✔Policy Frameworks in Zscaler - ✔✔They allow for the construction, consumption,
and passing of policy to various functions like Connectivity, Access Control, Security,
and Digital Experience.
✔✔Zscaler's Analytics & Reporting - ✔✔Provides insights and data to measure
coverage, value, and troubleshoot issues.
✔✔Intermediate Certificates in TLS Inspection - ✔✔Generated at line speed for all
users and locations, ensuring the best security and data protection outcomes.
✔✔Granular Application Controls - ✔✔Controls applied not just on the FQDN or URL
but across the entire URI being connected to.
✔✔Zscaler Client Connector in Device Posture - ✔✔Helps in assessing the posture of a
device by integrating with the Connectivity Services suite.
✔✔Identity Integration in Device Posture - ✔✔Helps in determining device attributes
through SAML authentication requests.
✔✔Device Compliance in Device Posture - ✔✔Ensures that the device adheres to
corporate policies, which is necessary for applying security policies.
✔✔ZIA in SSL Inspection - ✔✔Zscaler Internet Access (ZIA) is a forward proxy
performing SSL man-in-the-middle inspection.
✔✔ZIA SSL Certificate Handling - ✔✔Generates a certificate on the fly, signed by a
trusted issuer, and provides it back to the client.
✔✔ZPA in SSL Inspection - ✔✔Zscaler Private Access (ZPA) acts as a reverse proxy,
becoming the web server that the user connects to.
✔✔ZPA SSL Certificate Handling - ✔✔The App Connector or the ZPA Service Edge
provides a real service certificate back to the client.
✔✔Identifying SSL Inspection by Zscaler - ✔✔Clients can check the certificate chain
within their browser session to see which certificate is being used.
✔✔Primary Purpose of SSL Inspection - ✔✔To ensure business security by preventing
malware infections and data leaks.
✔✔Legal and Privacy Teams Buy-in for SSL Inspection - ✔✔Ensures understanding
and agreement on the necessity of SSL inspection for business security.
