Zscaler EDU 200 - Essentials - ZDTA
Study set latest exam with verified
solutions
What is used to detect if a SAML assertion was modified after being issued?
x x x x x x x x x x x x x
Options:
- XML
x
- Digital Signatures
x x
- Attributes
x
- Tokens - correct answer ✔Digital Signatures
x x x x x x
How is a SAML assertion delivered to Zscaler?
x x x x x x x
Options:
- The IdP sends it via an HTTP post directly to the SP via a backend API
x x x x x x x x x x x x x x x x
- The SP sends it via an HTTP post directly to the IdP via a backend API
x x x x x x x x x x x x x x x x
- The IdP sends it via the user's browser to the SP
x x x x x x x x x x x
- The SP sends it via a trusted authority to the IdP - correct answer ✔The IdP
x x x x x x x x x x x x x x x x
xsends it via the user's browser to the SP
x x x x x x x x
(Uses a form POST submitted via JavaScript)
x x x x x x
,In what way does Zscaler's Identity Proxy enable authentication to SaaS
x x x x x x x x x x x
applications?
Options:
- Injecting identity headers into the HTTP request
x x x x x x x
- SSL Inspection
x x
- Browser Isolation
x x
- Issuing SAML assertions - correct answer ✔Issuing SAML assertions
x x x x x x x x x
How does Zscaler Internet Access authenticate users? (Select 3)
x x x x x x x x
Options:
- SAML
x
- SCIM
x
- LDAP
x
- Hosted Database - correct answer ✔SAML, LDAP, Hosted Database
x x x x x x x x x
How does Zscaler Private Access authenticate end users?
x x x x x x x
Options:
- Username and Password in a form-based auth
x x x x x x x
- Hosted DB
x x
- SAML
x
- SCIM - correct answer ✔SAML
x x x x x
,What is the fastest way to change a user's access entitlements? - correct
x x x x x x x x x x x x x
answer ✔Send different attributes via SCIM
x x x x x
In order for Zscaler to enforce policy based on accessing devices, what
x x x x x x x x x x x x
method is best used by IdPs to share information about a user's accessing
x x x x x x x x x x x x x
device?
Options
- Kerberos
x
- SAML
x
- Header Injection
x x
- Mobile Device Management - correct answer ✔SAML
x x x x x x x
Privileged Remote Access supports which protocols? (Select 2)
x x x x x x x
Options:
- SSH
x
- RDP
x
- CIFS
x
- HTTP/HTTPS - correct answer ✔SSH, RDP
x x x x x x
Which services can coexist on an Application Segment?
x x x x x x x
Options:
- Isolation, Browser Access, and Inspection
x x x x x
, - RDP, SSH, and Inspection
x x x x
- Inspection, Isolation, and RDP
x x x x
- CIFS, RDP, and SSJ - correct answer ✔Isolation, Browser Access, and
x x x x x x x x x x x x
Inspection
How often does the Zscaler Client Connector check for software updates?
x x x x x x x x x x
Options:
- Every 2 hours
x x x
- Every 6 hours
x x x
- Every 12 hours
x x x
- Every 24 hours - correct answer ✔Every 2 hours
x x x x x x x x x
Which check guarantees identification of a corporate-managed device by the
x x x x x x x x x x
Zscaler Client Connector? - correct answer ✔Client Certificate & Non-
x x x x x x x x x
Exportable private key x x
You want Zscaler Client Connector to automatically redirect to your corporate
x x x x x x x x x x
xSAML IDP on launch. Which installer options should you configure to do so?
x x x x x x x x x x x x x
(Select 2) - correct answer ✔--cloudName
x x x x x
--userDomain
Where is the control to prevent a user from exiting Zscaler Client Connector?
x x x x x x x x x x x x
Options:
- It's a ZCC Installer option
x x x x x
Study set latest exam with verified
solutions
What is used to detect if a SAML assertion was modified after being issued?
x x x x x x x x x x x x x
Options:
- XML
x
- Digital Signatures
x x
- Attributes
x
- Tokens - correct answer ✔Digital Signatures
x x x x x x
How is a SAML assertion delivered to Zscaler?
x x x x x x x
Options:
- The IdP sends it via an HTTP post directly to the SP via a backend API
x x x x x x x x x x x x x x x x
- The SP sends it via an HTTP post directly to the IdP via a backend API
x x x x x x x x x x x x x x x x
- The IdP sends it via the user's browser to the SP
x x x x x x x x x x x
- The SP sends it via a trusted authority to the IdP - correct answer ✔The IdP
x x x x x x x x x x x x x x x x
xsends it via the user's browser to the SP
x x x x x x x x
(Uses a form POST submitted via JavaScript)
x x x x x x
,In what way does Zscaler's Identity Proxy enable authentication to SaaS
x x x x x x x x x x x
applications?
Options:
- Injecting identity headers into the HTTP request
x x x x x x x
- SSL Inspection
x x
- Browser Isolation
x x
- Issuing SAML assertions - correct answer ✔Issuing SAML assertions
x x x x x x x x x
How does Zscaler Internet Access authenticate users? (Select 3)
x x x x x x x x
Options:
- SAML
x
- SCIM
x
- LDAP
x
- Hosted Database - correct answer ✔SAML, LDAP, Hosted Database
x x x x x x x x x
How does Zscaler Private Access authenticate end users?
x x x x x x x
Options:
- Username and Password in a form-based auth
x x x x x x x
- Hosted DB
x x
- SAML
x
- SCIM - correct answer ✔SAML
x x x x x
,What is the fastest way to change a user's access entitlements? - correct
x x x x x x x x x x x x x
answer ✔Send different attributes via SCIM
x x x x x
In order for Zscaler to enforce policy based on accessing devices, what
x x x x x x x x x x x x
method is best used by IdPs to share information about a user's accessing
x x x x x x x x x x x x x
device?
Options
- Kerberos
x
- SAML
x
- Header Injection
x x
- Mobile Device Management - correct answer ✔SAML
x x x x x x x
Privileged Remote Access supports which protocols? (Select 2)
x x x x x x x
Options:
- SSH
x
- RDP
x
- CIFS
x
- HTTP/HTTPS - correct answer ✔SSH, RDP
x x x x x x
Which services can coexist on an Application Segment?
x x x x x x x
Options:
- Isolation, Browser Access, and Inspection
x x x x x
, - RDP, SSH, and Inspection
x x x x
- Inspection, Isolation, and RDP
x x x x
- CIFS, RDP, and SSJ - correct answer ✔Isolation, Browser Access, and
x x x x x x x x x x x x
Inspection
How often does the Zscaler Client Connector check for software updates?
x x x x x x x x x x
Options:
- Every 2 hours
x x x
- Every 6 hours
x x x
- Every 12 hours
x x x
- Every 24 hours - correct answer ✔Every 2 hours
x x x x x x x x x
Which check guarantees identification of a corporate-managed device by the
x x x x x x x x x x
Zscaler Client Connector? - correct answer ✔Client Certificate & Non-
x x x x x x x x x
Exportable private key x x
You want Zscaler Client Connector to automatically redirect to your corporate
x x x x x x x x x x
xSAML IDP on launch. Which installer options should you configure to do so?
x x x x x x x x x x x x x
(Select 2) - correct answer ✔--cloudName
x x x x x
--userDomain
Where is the control to prevent a user from exiting Zscaler Client Connector?
x x x x x x x x x x x x
Options:
- It's a ZCC Installer option
x x x x x