Zscaler EDU 200 - Essentials - ZDTA
Study set Actual 2025 Questions & Answers (Latest
Update) 100% Guarantee Pass (Verified
Answers)
What is the function of the auto proxy forwarding
firewall configuration?
Options:
- Automatically forwarding traffic from all ports and
protocols to Zscaler's proxy.
- Automatically detecting web traffic (e.g., FTP,
HTTPS) coming in on non-standard ports and
forwarding it to Zscaler's proxy
- Blocking traffic destined for a web proxy
- Turning the firewall into a makeshift proxy in case
the Zscaler cloud is down
Automatically detecting web traffic (e.g., FTP, HTTPS)
coming in on non-standard ports and forwarding it to
Zscaler's proxy
,What is the best practice for a cloud-gen firewall in
terms of having default rules?
Options:
- Block everything and start allowing what your users
need to access
- Allow all, even risky ports and protocols
- Allow all, with certain exceptions, for specific ports
and protocols (e.g., port 22, SSH)
- Block ICMP packets
Block everything and start allowing what your users
need to access
,Why is it important for a cloud-gen firewall to
implement DPI signatures?
Options:
- Evasive apps like BitTorrent can often disguise
themselves as coming from a standard port, and it is critical
to identify and block these applications
- Web traffic only traverses ports 80 and 443, so IPS
engines are geared towards these ports to help
people identify malicious web traffic
- In high-traffic volume situations, IPS signatures will
help reduce false positives
- IPS signatures are lightweight and can therefore be
handled by traditional firewalls
Evasive apps like BitTorrent can often disguise
themselves as coming from a standard port, and it is critical
to identify and block these applications
, makes them suspicious
Study set Actual 2025 Questions & Answers (Latest
Update) 100% Guarantee Pass (Verified
Answers)
What is the function of the auto proxy forwarding
firewall configuration?
Options:
- Automatically forwarding traffic from all ports and
protocols to Zscaler's proxy.
- Automatically detecting web traffic (e.g., FTP,
HTTPS) coming in on non-standard ports and
forwarding it to Zscaler's proxy
- Blocking traffic destined for a web proxy
- Turning the firewall into a makeshift proxy in case
the Zscaler cloud is down
Automatically detecting web traffic (e.g., FTP, HTTPS)
coming in on non-standard ports and forwarding it to
Zscaler's proxy
,What is the best practice for a cloud-gen firewall in
terms of having default rules?
Options:
- Block everything and start allowing what your users
need to access
- Allow all, even risky ports and protocols
- Allow all, with certain exceptions, for specific ports
and protocols (e.g., port 22, SSH)
- Block ICMP packets
Block everything and start allowing what your users
need to access
,Why is it important for a cloud-gen firewall to
implement DPI signatures?
Options:
- Evasive apps like BitTorrent can often disguise
themselves as coming from a standard port, and it is critical
to identify and block these applications
- Web traffic only traverses ports 80 and 443, so IPS
engines are geared towards these ports to help
people identify malicious web traffic
- In high-traffic volume situations, IPS signatures will
help reduce false positives
- IPS signatures are lightweight and can therefore be
handled by traditional firewalls
Evasive apps like BitTorrent can often disguise
themselves as coming from a standard port, and it is critical
to identify and block these applications
, makes them suspicious
