ZDTA Exam Dumps - Zscaler Digital Transformation Administrator

Zscaler Identity Threat Detection and Response gathers information about Active Directory (AD) domains primarily by running LDAP queries. LDAP queries allow the system to retrieve user and domain information directly and accurately from the AD infrastructure, enabling detection and analysis of identity threats and suspicious activities.

The study guide highlights the use of LDAP queries as a reliable and standard method for accessing AD domain data in this security context.

Zscaler Client Connector’s Tunnel 2.0 uses a packet‑filter based tunnel that encapsulates all IP traffic - both TCP and UDP on any port, plus ICMP - to the Zero Trust Exchange

A Watering Hole Attack is characterized by attackers planting malware on websites or services that are commonly accessed by their intended victims. The goal is to infect users who visit these trusted sites by injecting malicious code or malware. This type of attack leverages the trust users place in frequently visited services to deliver malware covertly.

Other options like Remote Access Trojans, Phishing, and Exploit Kits are attack types but do not specifically involve compromising commonly accessed services to plant malware.

Tenant Restriction is the ZIA feature that enforces access control policies to prevent access to certain SaaS applications from unmanaged or non-compliant devices. This ensures that only authorized and managed devices can access sensitive corporate SaaS resources, enhancing security posture.

The study guide highlights Tenant Restriction as an essential control for enforcing device compliance in SaaS access policies.

The ATP “Security Exceptions” allow list is leveraged by both Advanced Threat Protection and the Sandbox policy - URLs or hosts you add here won’t be submitted for sandbox analysis.