Zscaler EDU 200 - Essentials - ZDTA Study set ACTUAL UPDATED QUESTIONS
AND CORRECT ANSWERS
What is used to detect if a SAML assertion was modified Digital Signatures
after being issued?
Options:
- XML
- Digital Signatures
- Attributes
- Tokens
How is a SAML assertion delivered to Zscaler? The IdP sends it via the user's browser to the SP
(Uses a form POST submitted via JavaScript)
Options:
- The IdP sends it via an HTTP post directly to the SP via a
backend API
- The SP sends it via an HTTP post directly to the IdP via a
backend API
- The IdP sends it via the user's browser to the SP
- The SP sends it via a trusted authority to the IdP
In what way does Zscaler's Identity Proxy enable Issuing SAML assertions
authentication to SaaS applications?
Options:
- Injecting identity headers into the HTTP request
- SSL Inspection
- Browser Isolation
- Issuing SAML assertions
,How does Zscaler Internet Access authenticate users? SAML, LDAP, Hosted Database
(Select 3)
Options:
- SAML
- SCIM
- LDAP
- Hosted Database
How does Zscaler Private Access authenticate end users? SAML
Options:
- Username and Password in a form-based auth
- Hosted DB
- SAML
- SCIM
What is the fastest way to change a user's access Send different attributes via SCIM
entitlements?
In order for Zscaler to enforce policy based on accessing SAML
devices, what method is best used by IdPs to share
information about a user's accessing device?
Options
- Kerberos
- SAML
- Header Injection
- Mobile Device Management
Privileged Remote Access supports which protocols? SSH, RDP
(Select 2)
Options:
- SSH
- RDP
- CIFS
- HTTP/HTTPS
Which services can coexist on an Application Segment? Isolation, Browser Access, and Inspection
Options:
- Isolation, Browser Access, and Inspection
- RDP, SSH, and Inspection
- Inspection, Isolation, and RDP
- CIFS, RDP, and SSJ
, How often does the Zscaler Client Connector check for Every 2 hours
software updates?
Options:
- Every 2 hours
- Every 6 hours
- Every 12 hours
- Every 24 hours
Which check guarantees identification of a corporate- Client Certificate & Non-Exportable private key
managed device by the Zscaler Client Connector?
You want Zscaler Client Connector to automatically --cloudName
redirect to your corporate SAML IDP on launch. Which --userDomain
installer options should you configure to do so? (Select
2)
Where is the control to prevent a user from exiting In the Application Profile
Zscaler Client Connector?
Options:
- It's a ZCC Installer option
- In the Forwarding Profile
- In the Application Profile
- Under Administration, Advanced Settings
When moving from an Explicit Proxy to a The client will always resolve DNS
Tunneled/Transparent Proxy - what, if any, effects will be The client browser needs re-configuration
seen on the client? (Select 3) Authenticated websites may no longer work
Options:
- No Effect
- The client will always resolve DNS
- The client browser needs re-configuration
- Authenticated websites may no longer work
- An Explicit Proxy and a Transparent Proxy are the same
thing
What benefits does a Zscaler Tunnel have over other Tunnels encapsulate traffic and authenticate to the Zero Trust Exchange
forwarding mechanisms for Zscaler Client Connector?
Options:
- Tunnels are the only mechanism to install ZCC
- Tunnels enable only HTTP and HTTPS traffic to be
forwarded by ZCC
- Tunnels enable Zscaler to control the end user device
- Tunnels encapsulate traffic and authenticate to the Zero
Trust Exchange
AND CORRECT ANSWERS
What is used to detect if a SAML assertion was modified Digital Signatures
after being issued?
Options:
- XML
- Digital Signatures
- Attributes
- Tokens
How is a SAML assertion delivered to Zscaler? The IdP sends it via the user's browser to the SP
(Uses a form POST submitted via JavaScript)
Options:
- The IdP sends it via an HTTP post directly to the SP via a
backend API
- The SP sends it via an HTTP post directly to the IdP via a
backend API
- The IdP sends it via the user's browser to the SP
- The SP sends it via a trusted authority to the IdP
In what way does Zscaler's Identity Proxy enable Issuing SAML assertions
authentication to SaaS applications?
Options:
- Injecting identity headers into the HTTP request
- SSL Inspection
- Browser Isolation
- Issuing SAML assertions
,How does Zscaler Internet Access authenticate users? SAML, LDAP, Hosted Database
(Select 3)
Options:
- SAML
- SCIM
- LDAP
- Hosted Database
How does Zscaler Private Access authenticate end users? SAML
Options:
- Username and Password in a form-based auth
- Hosted DB
- SAML
- SCIM
What is the fastest way to change a user's access Send different attributes via SCIM
entitlements?
In order for Zscaler to enforce policy based on accessing SAML
devices, what method is best used by IdPs to share
information about a user's accessing device?
Options
- Kerberos
- SAML
- Header Injection
- Mobile Device Management
Privileged Remote Access supports which protocols? SSH, RDP
(Select 2)
Options:
- SSH
- RDP
- CIFS
- HTTP/HTTPS
Which services can coexist on an Application Segment? Isolation, Browser Access, and Inspection
Options:
- Isolation, Browser Access, and Inspection
- RDP, SSH, and Inspection
- Inspection, Isolation, and RDP
- CIFS, RDP, and SSJ
, How often does the Zscaler Client Connector check for Every 2 hours
software updates?
Options:
- Every 2 hours
- Every 6 hours
- Every 12 hours
- Every 24 hours
Which check guarantees identification of a corporate- Client Certificate & Non-Exportable private key
managed device by the Zscaler Client Connector?
You want Zscaler Client Connector to automatically --cloudName
redirect to your corporate SAML IDP on launch. Which --userDomain
installer options should you configure to do so? (Select
2)
Where is the control to prevent a user from exiting In the Application Profile
Zscaler Client Connector?
Options:
- It's a ZCC Installer option
- In the Forwarding Profile
- In the Application Profile
- Under Administration, Advanced Settings
When moving from an Explicit Proxy to a The client will always resolve DNS
Tunneled/Transparent Proxy - what, if any, effects will be The client browser needs re-configuration
seen on the client? (Select 3) Authenticated websites may no longer work
Options:
- No Effect
- The client will always resolve DNS
- The client browser needs re-configuration
- Authenticated websites may no longer work
- An Explicit Proxy and a Transparent Proxy are the same
thing
What benefits does a Zscaler Tunnel have over other Tunnels encapsulate traffic and authenticate to the Zero Trust Exchange
forwarding mechanisms for Zscaler Client Connector?
Options:
- Tunnels are the only mechanism to install ZCC
- Tunnels enable only HTTP and HTTPS traffic to be
forwarded by ZCC
- Tunnels enable Zscaler to control the end user device
- Tunnels encapsulate traffic and authenticate to the Zero
Trust Exchange
