What Malware Protection setting can be selected when setting up a Malware Policy?
Correct Answer: C
ZIA Malware Protection is an inline security control that blocks malicious files or objects detected through signatures, reputation, and threat-intelligence checks. The policy action must stop the malicious transfer rather than simply route, isolate, or change TLS behavior. Option C (Block) is correct because Block is the malware policy action that prevents the identified malicious content from reaching the user.
Why the other options are incorrect:
A . Isolate: Isolate sends a browser session to a remote isolation environment. Malware Policy enforcement is simpler: detected malware should be blocked.
B . Bypass: Bypass skips an inspection or control path. A malware policy is meant to stop known malicious content, not exempt it from enforcement.
D . Do Not Decrypt: SSL/TLS bypass tells the proxy to pass encrypted traffic without decrypting it for content inspection.
An organization has more than one ZIA instance, each on different clouds. The organization is using the same login domain for both and upon login users are given this menu in ZCC asking which cloud they would like to join. What steps could an Administrator take to avoid having this menu appear?
Correct Answer: B
To avoid prompting users with a cloud selection menu in the Zscaler Client Connector (ZCC), administrators should customize the MSI installation package with the CLOUDNAME parameter. This setting ensures the ZCC automatically connects to the correct ZIA cloud instance without user intervention. The CLOUDNAME corresponds to the designated cloud name for the organization’s ZIA tenant, effectively bypassing the prompt. This is outlined under Zscaler’s deployment and configuration instructions for ZCC.
Assume that you have four data centers around the globe, each hosting multiple applications for your users. What is the minimum number of App Connectors you should deploy?
Correct Answer: B
You need at least two App Connectors per data center to ensure high availability and load distribution, so with four data centers the minimum total is eight.
How does a Zscaler administrator troubleshoot a certificate pinned application?
Correct Answer: A
Certificate pinning prevents SSL interception by validating a server’s certificate against known values. When ZIA performs SSL inspection, it substitutes the certificate with one signed by Zscaler’s CA. This causes the handshake to fail for pinned applications. To troubleshoot, an administrator should review SSL logs to identify handshake failures, which indicate certificate pinning issues. Logs will show the TLS negotiation details, including any disruptions.
Which of the following secures all IP unicast traffic?
Correct Answer: D
Z-Tunnel 2.0 is the technology designed to secure all IP unicast traffic. It establishes encrypted tunnels between clients and Zscaler cloud edges, providing secure, transparent forwarding of all IP-based traffic, beyond just HTTP/S, ensuring comprehensive protection of network communications.
Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.
Please contact info@Prep2Certs.com and we will provide you with alternative payment options.
You can by Contacting our sales team.