ZDTA試験無料問題集「Zscaler Digital Transformation Administrator 認定」

A. 30-day expiry with 7-day rotation

B. 21-day expiry with 14-day rotation

C. 14-day expiry with 7-day rotation

D. 7-day expiry with 0-day rotation

A. Force traffic-steering changes at egress to prefer alternate service edges, anticipating improvements despite incomplete visibility.

B. Increase Bandwidth Control allocations for productivity classes during peak periods, assuming shaping under-provisioning is causing congestion.

C. Expand TLS inspection exceptions for Microsoft endpoints to reduce inspection overhead and anticipate lower timeouts.

D. Invoke ZDX Troubleshooting APIs to collect current hop-by-hop path metrics, DNS resolution times, and HTTP responses for the affected sessions.

A. Duplicate the off-network block rule and place both copies below the global allow rule to provide redundant coverage and increased monitoring

B. Configure Zscaler Client Connector to use Z-Tunnel 2.0 when off-network, and enable the appropriate Cloud Firewall rules

C. Increase inspection depth for on-network users to compensate for off-network access risks, assuming that stricter internal analysis provides an aggregate deterrent

D. Configure Zscaler Client Connector to use Z-Tunnel 1.0 when off-network, and enable the appropriate Cloud Firewall rules

A. Traffic is deferred to application categorization first and is blocked at Rule 2, with the user denied but with ambiguous logging

B. Traffic collides with the destination block at Rule 3 because of subnet inference, resulting in intermittent denial and noisy alerts

C. Traffic is inspected by IPS before Firewall Filtering and is dropped preemptively, reducing the effect of rule order but causing false positives

D. Traffic matches the Marketing allow at Rule 1, the global anonymizer block is not evaluated, and the user gains access to anonymizers, increasing exposure

A. Multiple distributed DNS resolvers providing local results

B. Single DNS resolver with forwarders providing centralized results

C. Private MPLS in each branch office providing connection

D. Optimized TCP Scaling for maximum throughput of files

A. Defer all upgrades to weekend maintenance windows to reduce peak risk, accepting prolonged exposure to known vulnerabilities

B. Randomize update timing for each device group to spread the effect across multiple hours and days, relying on support tickets to detect failures

C. Use staged rollout rings with assigned versions for selected groups, monitor deployment health in the Client Connector dashboard, and retain a revert path for cohorts that show instability

D. Immediately push the latest version to every segment through one channel to reduce fragmentation, and delay monitoring until users report problems

A. Out-of-band CASB

B. Cloud application control

C. URL filtering with SSL inspection

D. Endpoint DLP

A. ZIdentity Administrator Audit Log filtered for entitlement updates and role assignments

B. Endpoint DLP telemetry summarizing sensitive-data handling and removable-media events

C. Firewall Insights reports centered on rule hits and bandwidth consumption at egress points

D. Web Insights transaction logs focusing on URL categories and inline policy actions

A. Use ISP Insights and geographic latency maps to aggregate experience scores and network-path measurements by provider and region

B. Examine individual CloudPath traces for per-hop jitter and packet loss while assuming that the last-mile segment is the bottleneck

C. Compare device Wi-Fi measurements with UCaaS quality trends and infer that users' local networks are responsible

D. Correlate meeting-level mean opinion scores with endpoint CPU spikes and conclude that local resource limitations are constraining audio and video

A. DNS Dashboards, Insights and Logs

B. DNS Tunnel and DNS Application Control

C. Destination NAT

D. FQDN Filtering with wildcard

A. Zscaler Private Access

B. Zscaler Client Connector

C. App Connector

D. Browser Isolation

A. Align the policies to shared DLP engines and classification labels, with clearly defined precedence to eliminate cross-channel conflicts

B. Reduce detection scope for private applications and prioritize web controls to minimize cross-channel matches

C. Create separate custom rules for each channel to isolate false positives despite using different classification references

D. Segment enforcement by department so identical data types can be handled differently without policy overlap

A. ZPA API

B. OneAPI

C. ZIdentity

D. Postman