Zscaler ZS-DTA Online Practice Questions and Exam Preparation

Zscaler ZS-DTA Online Questions & Answers

• Question 191:

  What is the default policy configuration setting for checking for Viruses?

  A. Allow
  B. Block
  C. Unwanted Applications
  D. Malware Protection
  B. Block

  ---

  Explanation

  Out of the box, Zscaler's Malware Protection policy is configured to block any traffic identified as a virus, ensuring known malicious files are denied immediately.

• Question 192:

  What mechanism identifies the ZIA Service Edge node that the Zscaler Client Connector should connect to?

  A. The IP ranges included/excluded in the App Profile
  B. The PAC file used in the Forwarding Profile
  C. The PAC file used in the Application Profile
  D. The Machine Key used in the Application Profile
  B. The PAC file used in the Forwarding Profile

• Question 193:

  When enabled during Zscaler Client Connector (ZCC) installation, what specific control mechanism does the 'Strict Enforcement' feature exert over internet access on end-user Windows workstations?

  A. This install option allows administrators to require users to restart their Windows Machine after ZCC installation before accessing the internet.
  B. This installation option enables administrators to prevent users from uninstalling the ZCC without proper authorization.
  C. This install option allows administrators to require users to enroll with the ZCC before accessing the internet.
  D. This installation option enables administrators to prevent users from logging out the ZCC without proper authorization.
  C. This install option allows administrators to require users to enroll with the ZCC before accessing the internet.

  ---

  Explanation

  Enabling Strict Enforcement during installation forces the Client Connector into a fail-close state - blocking all Internet access until the endpoint successfully enrolls (authenticates) with Zscaler.

  References:

  https://community.zscaler.com/s/question/0D54u00009evmcfCAA/enforce-users-to-use-zscaler-before-they-do-any-internet-browsing

• Question 194:

  When filtering user access to certain web destinations what can be a better option, URL or Cloud Application filtering Policies?

  A. Cloud Application policies provide better access control.
  B. URL filtering policies provide better access control.
  C. Wherever possible URL policies are recommended.
  D. Both provide the same filtering capabilities.
  A. Cloud Application policies provide better access control.

  ---

  Explanation

  Cloud Application policies offer deeper, application#aware controls, such as granular actions on specific

  SaaS functions, making them a superior choice for managing access to modern web apps compared to generic URL filters.

• Question 195:

  Which of the following are types of device posture?

  A. Detect Crowdstrike, Crowdstrike ZTA score, First name
  B. Certificate Trust, File Path, Full Disk Encryption
  C. Domain Joined, Process Check, Deception Check
  D. Unauthorized Modification, OS Version, License Key
  B. Certificate Trust, File Path, Full Disk Encryption

• Question 196:

  Malicious File Protection exclusions may be configured for which types of files?

  A. Files sent using the PPTP protocol
  B. Files sent using the SCP protocol
  C. Files sent using the RTSP protocol
  D. Files encrypted with a password
  D. Files encrypted with a password

  ---

  Explanation

  In ZIA's Malware Protection policy, you can configure security exceptions to bypass scanning for specific file conditions-most notably password-protected or encrypted files. Other transport protocols (PPTP, SCP, RTSP) aren't part of Zscaler's file-type exception settings.

  References:

  https://help.zscaler.com/zia/configuring-security-exceptions-malware-protection-policy

• Question 197:

  Zscaler Client Connector checks for software updates automatically at which interval?

  A. Every 6 hours
  B. Every 12 hours
  C. Every 2 hours
  D. Every 24 hours
  C. Every 2 hours

  ---

  Explanation

  Zscaler Client Connector automatically checks for software updates every 2 hours by default.

• Question 198:

  What is the purpose of the Zscaler Client Connector providing the authentication token to the Zscaler Client Connector Portal after it is received from Zscaler Internet Access?

  A. To bypass multifactor authentication (MFA) during the enrollment process
  B. To immediately grant the user access to Zscaler Private Access resources
  C. To enable the portal to register the user's device and pass the registration to Zscaler Internet Access
  D. To share the authentication token with the SAML IdP to validate the user session
  C. To enable the portal to register the user's device and pass the registration to Zscaler Internet Access

  ---

  Explanation

  The Zscaler Client Connector provides the authentication token to the Zscaler Client Connector Portal to enable the portal to register the user's device and pass the registration to Zscaler Internet Access. This registration process is crucial for device posture assessment and policy enforcement, ensuring that only registered and compliant devices receive appropriate access.

• Question 199:

  Which of the following provides for the discovery of Newly Observed Domains within 3 minutes of the domain coming online?

  A. IP Chicken
  B. MX Toolbox
  C. Farsight Feed
  D. Dig
  C. Farsight Feed

  ---

  Explanation

  The Farsight "Newly Observed Domains" (NOD) feed provides near real-time visibility into domains as soon as they first resolve on the Internet - typically within 60 seconds (well under three minutes) of appearing in DNS. Other tools like dig or MX Toolbox rely on manual queries and aren't designed for continuous, automated discovery.

  References:

  https://www.cdw.com/product/farsight-security-newly-observed-domains-subscription-license-1-year/6695376

• Question 200:

  Which of the following is an unsupported tunnel type?

  A. Generic Routing and Encapsulation (GRE)
  B. HTTP Connect Tunnels
  C. Proprietary Microtunnels
  D. Secure Socket Tunneling Protocol (SSTP)
  D. Secure Socket Tunneling Protocol (SSTP)

  ---

  Explanation

  Secure Socket Tunneling Protocol (SSTP) is not supported as a tunnel type by Zscaler. Zscaler supports GRE, HTTP Connect tunnels, and its own proprietary Microtunnels for traffic forwarding and secure connectivity, but SSTP is not among the supported tunnel protocols.