Question 1

What mechanism identifies the ZIA Service Edge node that the Zscaler Client Connector should connect to?

Options :

A : The IP ranges included/excluded in the App Profile

B : The PAC file used in the Forwarding Profile

C : The PAC file used in the Application Profile

D : The Machine Key used in the Application Profile

Answer: C

Question 2

An organization has more than one ZIA instance, each on different clouds. The organization is using the same login domain for both and upon login users are given this menu in ZCC asking which cloud they would like to join. What steps could an Administrator take to avoid having this menu appear?

Options :

A : Customize an MSI version of the ZCC file specifying the USERDOMAIN variable.

B : Customize an MSI version of the ZCC file specifying the CLOUDNAME variable.

C : Federate the login domain between two different IDP instances.

D : Create only one SAML integration with the desired ZIA instance.

Answer: B

Question 3

Which type of attack plants malware on commonly accessed services?

Options :

A : Remote access trojans

B : Phishing

C : Exploit kits

D : Watering hole attack

Answer: D

Question 4

What does Advanced Threat Protection defend users from?

Options :

A : Vulnerable JavaScripts

B : Large iFrames

C : Malicious active content

D : Command injection attacks

Answer: C

Question 5

Which of the following connects Zscaler users to the nearest Microsoft 365 servers for a better experience?

Options :

A : Single DNS resolver with forwarders providing centralized results

B : Private MPLS in each branch office providing connection

C : Multiple distributed DNS resolvers providing local results

D : Optimized TCP Scaling for maximum throughput of files

Answer: C