Download Zscaler ZDTE Final Competency Assessment and more Exams Cybercrime, Cybersecurity and Data Privacy in PDF only on Docsity!
Zscaler ZDTE Final Competency Assessment.
Which capabilities are not available on standard firewall subscription? - Correct Answer: ✔️ ✔️ DNS Tunneling, IPS Control, and non-standard traffic redirection.
How many apps and attributes are in the Shadow IT database? - Correct Answer: ✔️ ✔️ 45,000 apps and 75 attributes.
What is the most significant metric when calculating a ZDX score? - Correct Answer: ✔️ ✔️ Page Fetch Time
What is the timeframe for a ZDX score? - Correct Answer: ✔️ ✔️ A rolling 7 day window of time.
What is ZDX copilot? - Correct Answer: ✔️ ✔️
An AI-powered assistant that boosts productivity by providing the information users
need through simple questions. This feature within the Zscaler Digital Experience (ZDX) platform enhances user navigation and optimizes functionalities using AI and machine learning.
Which API client does Zscaler recommend? - Correct Answer: ✔️ ✔️ Postman
How many key engines does Zscaler firewall have? - Correct Answer: ✔️ ✔️ 4
What is parallel processing? - Correct Answer: ✔️ ✔️ When a request is made, Zscaler evaluates all relevant policies simultaneously and enforces the strictest rule.
What is ThreatParse? - Correct Answer: ✔️ ✔️ An investigative feature that takes raw attack logs and reconstructs them into plain English.
Which traffic is handled by Z-Tunnel 1.0? - Correct Answer: ✔️ ✔️ Only HTTP and HTTPS ( ports 80 and 443)
How are users added and configured in a Hosted DB? - Correct Answer: ✔️ ✔️ Manually or through a CSV.
LDAP can be used to authenticate to ZPA. - Correct Answer: ✔️ ✔️ False. LDAP authentication applies only to Zscaler Internet Access.
How does LDAP authenticate with Zscaler? - Correct Answer: ✔️ ✔️
- Zscaler synchronizes users and groups with Active Directory
- Zscaler requests username
- Zscaler requests password
- Zscaler performs an LDAP BIND against Active Directory
- If successful, Zscaler sends an authentication token to ZCC.
What are the physical Internet Service Edge types? - Correct Answer: ✔️ ✔️ Service Edge 3 and Service Edge 5. Each contains either 3 or 5
For how long does Zscaler log every transaction? - Correct Answer: ✔️ ✔️ Zscaler logs every transaction of every user or endpoint for 180 full days.
What is Decpetion? - Correct Answer: ✔️ ✔️ Deception is a cybersecurity technique that uses decoys to entice attackers and identify their actions by impersonating actual assets within a network.
How does Deception fit int o the zero trust architecture? - Correct Answer: ✔️ ✔️ Deception works as a threat detection layer of a zero trust architecture, helping to detect and stop attacks that have been able to bypass existing defenses.
What makes up "shadow IT"? - Correct Answer: ✔️ ✔️ Unknown, unmanaged, or forgotten assets.
Which metrics are collected by Web Probes? - Correct Answer: ✔️ ✔️
Page Fetch Time
DNS Time
Server Response Time
Availability
Which metrics are collected by Cloud Path Probes - Correct Answer: ✔️ ✔️
Hop count
Packet loss
Latency
What is a subcloud? - Correct Answer: ✔️ ✔️ A subcloud is a subset of ZIA Public Service Edges, ZIA Private Service Edges, or both.
What do iOS and Android devices use to connect to the ZTE? - Correct Answer: ✔️ ✔️ Zscaler Client Connector
What are the three levels of the Zscaler Multi-Tenant Cloud Security Architecture? - Correct Answer: ✔️ ✔️
Central Authority = The Brains
Enforcement Nodes & Brokers = The Engines
Logging Services = The Memory
If using subcloud, what variable is returned in the PAC file? - Correct Answer: ✔️ ✔️ Gateway.subcloud.zscaler.net
If 2 App Connectors are insufficient for your number of apps, what should you do? - Correct Answer: ✔️ ✔️ Install a third App Connector.
How many active probes can a user have? - Correct Answer: ✔️ ✔️ 7 for ZDX Standard
30 for ZDX Advanced or Advanced Plus
Which ZDX tier is required for Copilot? - Correct Answer: ✔️ ✔️ ZDX Advanced Plus
Where does the API Gateway reside? - Correct Answer: ✔️ ✔️ The Central Authority
How do you deploy GRE tunnels? - Correct Answer: ✔️ ✔️ Configure two tunnels per site - primary and a backup to optimal DCs.
What is the maximum bandwidth for each GRE tunnel? - Correct Answer: ✔️ ✔️ 1 Gbps if not behind NAT. 250 Mbps if behind NAT.
How do you configure IPsec tunnels? - Correct Answer: ✔️ ✔️ Configure two tunnels per ISP per site - primary and a backup to optimal DCs.
What is the maximum bandwidth for each IPsec tunnel? - Correct Answer: ✔️ ✔️ 400 Mbps
How many IKEv2 SAs per IPsec tunnel? - Correct Answer: ✔️ ✔️ No more than
What are the two Index Tools? - Correct Answer: ✔️ ✔️ Exact Data Match (EDM) and Index Data Match (IDM)
How do DLP Dictionaries, Engines, and Policies work together? - Correct Answer: ✔️ ✔️
Engines are made of Dictionaries.
Policies are made of Engines.
