Zscaler Digital Transformation
Administrator (ZDTA) Certification Actual
Exam Questions With Reviewed 100%
Correct Detailed Answers
Guaranteed Pass!!
1. Application Profile Function in Zscaler - ANSWER Maps forwarding
profiles to different users and devices based on specific criteria.
2. App Profile PAC URL Role - ANSWER Defines the Zero Trust Exchange
node to be used based on the client's geographic IP information.
3. Custom PAC URL Configuration Item - ANSWER In an application profile.
4. Custom PAC URL - ANSWER References the PAC file configured in the
ZIA Admin Portal to make decisions on traffic forwarding or bypassing.
5. Override WPAD - ANSWER Prevents the system GPO WPAD
configuration and ensures the forwarding profile's WPAD configuration is
used.
6. Restart WinHTTP - ANSWER Ensures the system refreshes proxy
configuration once Zscaler Client Connector is established, specific to
Windows devices.
,7. Zscaler SSL Certificate - ANSWER If not pushing own certificates,
enabling this option uses the certificate provided by Zscaler for SSL
inspection.
8. Tunnel Internal Client Connector Traffic - ANSWER Health updates and
policy traffic pass through Zscaler tunnels towards the Zero Trust Exchange.
9. Cache System Proxy - ANSWER Stores the system proxy state from
before installation and reverts to previous settings if the connector is
uninstalled or disabled.
10.Supportability in Zscaler Client Connector - ANSWER Ensures business
continuity in case of issues with updates, allowing for reverting to previous
versions if necessary.
11.Zscaler root CA - ANSWER The Zscaler root CA as well as custom root
CAs can be deployed within an organization.
12.SSL certificates in app profile - ANSWER Ensuring that the SSL
certificate is installed.
13.Bypassed applications in Z-Tunnel 2.0 - ANSWER Microsoft Teams or
Zoom traffic.
,14.Default address range in Z-Tunnel 2.0 - ANSWER The default 0.0.0.0/0
address range and all ports 1 to 65,535 TCP and UDP.
15.Zscaler as DNS resolver - ANSWER Zscaler acts as a DNS resolver.
16.Handling DNS requests from DHCP - ANSWER The client may query that
directly, and Zscaler will see the traffic once it comes through and make a
DNS re-resolution request.
17.Forwarding Profile PAC files - ANSWER Steering traffic toward or away
from the Client Connector.
18.App Profile PAC files - ANSWER They steer traffic towards or away from
the Zscaler Cloud after the Client Connector receives it.
19.Forwarding Profile PAC purpose - ANSWER It states which HTTP proxy is
going to be used for a specific URL.
20.Application Profile PAC routing - ANSWER It routes traffic after
interception and determines the geographically closest Zscaler Enforcement
Node (ZEN).
21.PAC files on ZIA Admin Portal - ANSWER They take a URL and a host as
input and return an answer of sending the traffic 'DIRECT' or 'PROXY'.
, 22.Migrating existing PAC files to Zscaler - ANSWER By using Tunnel with
Local Proxy and configuring the browser to treat Zscaler Client Connector as
a proxy.
23.Browser behavior in PAC to tunnel mode - ANSWER The browser will
lose the definition of what constitutes an intranet site, potentially
prompting user authentication for intranet sites.
24.Defining intranet sites in tunnel mode - ANSWER By explicitly defining
them within the intranet zone and using configurations like the
AuthServerAllowList.
25.Key characteristic of ZTunnel 2.0 - ANSWER It can include or exclude
traffic at the adapter level and pass it into the Z-Tunnel 2.0.
26.Z-Tunnel 1.0 interception - ANSWER Traffic at the network layer on
ports 80 or 443.
27.Tunnel with Local Proxy configuration requirement - ANSWER A
Forwarding Profile PAC to target traffic directly to the local listener on
Zscaler Client Connector.
28.Traffic routing in route-based mode - ANSWER Through a routed
adapter configured on the machine, following the routing table.
Administrator (ZDTA) Certification Actual
Exam Questions With Reviewed 100%
Correct Detailed Answers
Guaranteed Pass!!
1. Application Profile Function in Zscaler - ANSWER Maps forwarding
profiles to different users and devices based on specific criteria.
2. App Profile PAC URL Role - ANSWER Defines the Zero Trust Exchange
node to be used based on the client's geographic IP information.
3. Custom PAC URL Configuration Item - ANSWER In an application profile.
4. Custom PAC URL - ANSWER References the PAC file configured in the
ZIA Admin Portal to make decisions on traffic forwarding or bypassing.
5. Override WPAD - ANSWER Prevents the system GPO WPAD
configuration and ensures the forwarding profile's WPAD configuration is
used.
6. Restart WinHTTP - ANSWER Ensures the system refreshes proxy
configuration once Zscaler Client Connector is established, specific to
Windows devices.
,7. Zscaler SSL Certificate - ANSWER If not pushing own certificates,
enabling this option uses the certificate provided by Zscaler for SSL
inspection.
8. Tunnel Internal Client Connector Traffic - ANSWER Health updates and
policy traffic pass through Zscaler tunnels towards the Zero Trust Exchange.
9. Cache System Proxy - ANSWER Stores the system proxy state from
before installation and reverts to previous settings if the connector is
uninstalled or disabled.
10.Supportability in Zscaler Client Connector - ANSWER Ensures business
continuity in case of issues with updates, allowing for reverting to previous
versions if necessary.
11.Zscaler root CA - ANSWER The Zscaler root CA as well as custom root
CAs can be deployed within an organization.
12.SSL certificates in app profile - ANSWER Ensuring that the SSL
certificate is installed.
13.Bypassed applications in Z-Tunnel 2.0 - ANSWER Microsoft Teams or
Zoom traffic.
,14.Default address range in Z-Tunnel 2.0 - ANSWER The default 0.0.0.0/0
address range and all ports 1 to 65,535 TCP and UDP.
15.Zscaler as DNS resolver - ANSWER Zscaler acts as a DNS resolver.
16.Handling DNS requests from DHCP - ANSWER The client may query that
directly, and Zscaler will see the traffic once it comes through and make a
DNS re-resolution request.
17.Forwarding Profile PAC files - ANSWER Steering traffic toward or away
from the Client Connector.
18.App Profile PAC files - ANSWER They steer traffic towards or away from
the Zscaler Cloud after the Client Connector receives it.
19.Forwarding Profile PAC purpose - ANSWER It states which HTTP proxy is
going to be used for a specific URL.
20.Application Profile PAC routing - ANSWER It routes traffic after
interception and determines the geographically closest Zscaler Enforcement
Node (ZEN).
21.PAC files on ZIA Admin Portal - ANSWER They take a URL and a host as
input and return an answer of sending the traffic 'DIRECT' or 'PROXY'.
, 22.Migrating existing PAC files to Zscaler - ANSWER By using Tunnel with
Local Proxy and configuring the browser to treat Zscaler Client Connector as
a proxy.
23.Browser behavior in PAC to tunnel mode - ANSWER The browser will
lose the definition of what constitutes an intranet site, potentially
prompting user authentication for intranet sites.
24.Defining intranet sites in tunnel mode - ANSWER By explicitly defining
them within the intranet zone and using configurations like the
AuthServerAllowList.
25.Key characteristic of ZTunnel 2.0 - ANSWER It can include or exclude
traffic at the adapter level and pass it into the Z-Tunnel 2.0.
26.Z-Tunnel 1.0 interception - ANSWER Traffic at the network layer on
ports 80 or 443.
27.Tunnel with Local Proxy configuration requirement - ANSWER A
Forwarding Profile PAC to target traffic directly to the local listener on
Zscaler Client Connector.
28.Traffic routing in route-based mode - ANSWER Through a routed
adapter configured on the machine, following the routing table.
