Page | 1
ZSCALER DIGITAL TRANSFORMATION
ENGINEER (ZDTE) QUESTIONS WITH
DETAILED VERIFIED ANSWERS
Which metrics are collected by Web Probes? Ans: Page Fetch Time
DNS Time
Server Response Time
Availability
Which metrics are collected by Cloud Path Probes Ans: Hop count
Packet loss
Latency
What is a subcloud? Ans: A subcloud is a subset of ZIA Public Service
Edges, ZIA Private Service Edges, or both.
What do iOS and Android devices use to connect to the ZTE? Ans:
Zscaler Client Connector
What are the three levels of the Zscaler Multi-Tenant Cloud Security
Architecture? Ans: Central Authority = The Brains
Enforcement Nodes & Brokers = The Engines
Logging Services = The Memory
If using subcloud, what variable is returned in the PAC file? Ans:
Gateway.subcloud.zscaler.net
If 2 App Connectors are insufficient for your number of apps, what should
you do? Ans: Install a third App Connector.
, Page | 2
How many active probes can a user have? Ans: 7 for ZDX Standard
30 for ZDX Advanced or Advanced Plus
Which ZDX tier is required for Copilot? Ans: ZDX Advanced Plus
What are some use cases of OneAPI Ans: URL Filtering
Application Access Management
Configuring App Connector Groups
What is an HTTP code 429? Ans: API rate limit exceeded
What are the four stages of the Cloud Sandbox workflow? Ans: 1. Cloud
Effect
2. Prefiltered
3. Behavioral Analysis
4. Post-processing
What do we do if a customer changes the default risk score of an
application? Ans: We immediately readjust that risk score for that
specific tenant, for that specific customer.
What does OneAPI use for authentication? Ans: OAuth
How does OneAPI simplify API integration? Ans: By providing a single-
entry point for accessing multiple APIs.
Where does the API Gateway reside? Ans: The Central Authority
How do you deploy GRE tunnels? Ans: Configure two tunnels per site -
primary and a backup to optimal DCs.
What is the maximum bandwidth for each GRE tunnel? Ans: 1 Gbps if
not behind NAT. 250 Mbps if behind NAT.
ZSCALER DIGITAL TRANSFORMATION
ENGINEER (ZDTE) QUESTIONS WITH
DETAILED VERIFIED ANSWERS
Which metrics are collected by Web Probes? Ans: Page Fetch Time
DNS Time
Server Response Time
Availability
Which metrics are collected by Cloud Path Probes Ans: Hop count
Packet loss
Latency
What is a subcloud? Ans: A subcloud is a subset of ZIA Public Service
Edges, ZIA Private Service Edges, or both.
What do iOS and Android devices use to connect to the ZTE? Ans:
Zscaler Client Connector
What are the three levels of the Zscaler Multi-Tenant Cloud Security
Architecture? Ans: Central Authority = The Brains
Enforcement Nodes & Brokers = The Engines
Logging Services = The Memory
If using subcloud, what variable is returned in the PAC file? Ans:
Gateway.subcloud.zscaler.net
If 2 App Connectors are insufficient for your number of apps, what should
you do? Ans: Install a third App Connector.
, Page | 2
How many active probes can a user have? Ans: 7 for ZDX Standard
30 for ZDX Advanced or Advanced Plus
Which ZDX tier is required for Copilot? Ans: ZDX Advanced Plus
What are some use cases of OneAPI Ans: URL Filtering
Application Access Management
Configuring App Connector Groups
What is an HTTP code 429? Ans: API rate limit exceeded
What are the four stages of the Cloud Sandbox workflow? Ans: 1. Cloud
Effect
2. Prefiltered
3. Behavioral Analysis
4. Post-processing
What do we do if a customer changes the default risk score of an
application? Ans: We immediately readjust that risk score for that
specific tenant, for that specific customer.
What does OneAPI use for authentication? Ans: OAuth
How does OneAPI simplify API integration? Ans: By providing a single-
entry point for accessing multiple APIs.
Where does the API Gateway reside? Ans: The Central Authority
How do you deploy GRE tunnels? Ans: Configure two tunnels per site -
primary and a backup to optimal DCs.
What is the maximum bandwidth for each GRE tunnel? Ans: 1 Gbps if
not behind NAT. 250 Mbps if behind NAT.
