Question 1

When a SAML IDP returns an assertion containing device attributes, which Zscaler component consumes the attributes first, for policy creation?

Options :

A : Enforcement node

B : Zscaler SAML SP

C : Mobile Admin Portal

D : Zero Trust Exchange

Answer: D

Question 2

Which type of attack plants malware on commonly accessed services?

Options :

A : Remote access trojans

B : Phishing

C : Exploit kits

D : Watering hole attack

Answer: D

Question 3

Which of the following connects Zscaler users to the nearest Microsoft 365 servers for a better experience?

Options :

A : Single DNS resolver with forwarders providing centralized results

B : Private MPLS in each branch office providing connection

C : Multiple distributed DNS resolvers providing local results

D : Optimized TCP Scaling for maximum throughput of files

Answer: C

Question 4

An organization has more than one ZIA instance, each on different clouds. The organization is using the same login domain for both and upon login users are given this menu in ZCC asking which cloud they would like to join. What steps could an Administrator take to avoid having this menu appear?

Options :

A : Customize an MSI version of the ZCC file specifying the USERDOMAIN variable.

B : Customize an MSI version of the ZCC file specifying the CLOUDNAME variable.

C : Federate the login domain between two different IDP instances.

D : Create only one SAML integration with the desired ZIA instance.

Answer: B

Question 5

What does Advanced Threat Protection defend users from?

Options :

A : Vulnerable JavaScripts

B : Large iFrames

C : Malicious active content

D : Command injection attacks

Answer: C