Pass the Zscaler Digital Transformation Administrator ZDTA Questions and answers with ExamsMirror

Imported MIP labels are applied as matching criteria within a custom DLP Policy, letting ZIA inspect data in motion and enforce actions (block, quarantine, notify) based on the sensitivity label assigned by Microsoft Information Protection.

Downloaders are a specific type of malware whose primary purpose is to download and install other malicious software onto a victim's machine. Unlike standalone threats, downloaders typically establish initial access and then retrieve payloads like ransomware, trojans, or spyware from a command and control server. Their role in the malware chain is fundamental for multi-stage attacks.

When the Zscaler Office 365 One Click Rule is enabled, Office 365 traffic is exempted from SSL inspection and other web policies to optimize performance and user experience. This rule simplifies policy configuration by automatically identifying and excluding Office 365 cloud traffic from inspection, reducing latency and avoiding potential conflicts with Office 365 services.

The study guide clarifies that this rule helps balance security with seamless cloud application usage.

Trusted Network Detection in Zscaler Client Connector can reference DNS Search Domains, DNS Server IPs, and Hostname Resolution (i.e. a hostname and the IP it resolves to) as criteria for determining a trusted network.

Malware Protection for HTTPS traffic relies on the Zero Trust Exchange’s TLS Inspection to decrypt the SSL/TLS stream, enabling the malware‑detection engines to scan payloads against known threat signatures.

The Cloud Firewall includes Deep Packet Inspection (DPI) capabilities that detect protocol evasion techniques where applications try to communicate over non-standard ports to bypass firewall controls. Once detected, the traffic is sent to the appropriate inspection engines for further handling and mitigation. This ensures that evasive traffic does not bypass security controls.

Zscaler uses a proprietary technology called Zscaler PageRisk to calculate risk attributes dynamically for websites. PageRisk assesses the risk level of a website based on a variety of dynamic factors, including the site's content, reputation, and behavior, helping to identify potentially harmful or suspicious sites in real time.

This dynamic risk scoring allows Zscaler to enforce security policies more effectively, blocking or allowing access based on calculated risk rather than static lists alone. The study guide specifies that PageRisk is integral to the platform's adaptive security posture and URL filtering capabilities .

Access Policies apply the same allow-or-block decision to both individual Application Segments and to Application Segment Groups when their rule conditions are met.

The “Blocked Countries” feature in Advanced Threat Protection lets you restrict access to web destinations based on their geographic location, preventing connections to any sites hosted in the specified countries.

The Email Notification Template is the built‑in mechanism for forwarding a copy of the exact content that triggered a DLP rule to your designated auditor via email.