試験ZDTA トピック3 問題18 スレッド

A ZPA microtunnel is the per-application communication channel created after the user is authenticated and authorized. It carries traffic from the user side through the Zscaler service edge to the App Connector path for the internal application. Option D (To create an end-to-end communication channel to internal applications) is correct because the M-Tunnel is built for private application communication, not endpoint-to-endpoint or IdP connectivity.
Why the other options are incorrect:
A). To provide an end-to-end communication channel between ZCC clients: ZCC-to-ZCC communication would be peer endpoint connectivity. A ZPA microtunnel is created from the user side toward a specific internal application.
B). To provide an end-to-end communication channel to Microsoft Applications such as M365: Microsoft
365 optimization uses local breakout, DNS locality, and inspection bypass where Microsoft recommends it for performance.
C). To create an end-to-end communication channel to Azure AD for authentication: Azure AD communication is part of authentication. The microtunnel carries private-application traffic after access is authorized.