ZDTA Exam Questions & Answers

Out of the box, Zscaler's Malware Protection policy is configured to block any traffic identified as a virus, ensuring known malicious files are denied immediately.

The preferred method for authentication to access Zscaler's oneAPI is OpenID Connect (OIDC). OIDC is an identity layer on top of the OAuth 2.0 protocol and provides a modern, secure, and scalable way to authenticate users and services interacting with the API.

The study guide notes that OIDC supports flexible and secure authentication, making it the recommended choice for API access management within Zscaler's platform.

The Deception feature in Zscaler detects intruders attempting to access internal resources by deploying deceptive assets or traps that identify unauthorized or suspicious activity. This proactive approach to threat detection helps identify attackers who have bypassed other defenses.

Firewall Filtering policies govern network level application traffic, so access to a Network Application is blocked by a Firewall Filtering rule.

When a SAML Identity Provider (IdP) returns an assertion containing device attributes, these attributes are first consumed by the Zero Trust Exchange component. This component uses the device attributes for policy creation and enforcement decisions, integrating identity and device posture information to make dynamic access decisions.