[2026年10月] ベスト Digital Transformation Administrator 学習ガイドは ZDTA 試験問題集 [Q62-Q83]

質問 62
A global URL Filtering rule blocks Newly Registered Domains and Anonymizers. Marketing has a rule that allows Social Media with a Caution action, and specific group-based rules appear above broader global rules.
A user who belongs to both Marketing and Contractors attempts to access a social-media subdomain that is newly registered and classified under both Social Media and Newly Registered Domains.
What enforcement outcome is most consistent with the rule hierarchy and category matching?

質問 63
Within ZPA, the mapping relationship between Connector Groups and Server Groups can best be defined as which of the following?

質問 64
A security lead reviews an executive summary: data-loss risk is driven by high-volume uploads to risky SaaS applications and unmanaged generative AI use; MTTR for BU-West remains high because of ticket-routing delays; and the board wants a 15% reduction in the data-loss risk score within 60 days. Peer benchmarks are similar but show identity risk as the primary driver elsewhere.
Which action should be taken next?

質問 65
Which of the following DLP Notification methods can be used to forward a copy of the data that triggered the DLP policy to the auditor?

質問 66
A user assigned to the Contractors group reaches an internal web app despite a rule to prevent contractor access.
Taking into consideration evaluation order and rule logic, which explanation best accounts for the access outcome?

質問 67
A team needs to validate who changed an entitlement and whether the change succeeded, and then correlate the activity with broader events.
Which audit source best supports this review before adding SIEM context?

質問 68
What is the duration of Zscaler ‘ s short-lived issuing CA for SSL Inspection?

質問 69
During the authentication process while accessing a private web application, how is the SAML assertion delivered to the service provider?

質問 70
What does the user risk score enable a user to do?

質問 71
A mixed policy set contains an Allow for high-value assets with posture, followed by a Block for high-value assets, then role-specific Allow rules for contractors and employees. Multiple users report unexpected reach to internal apps from unmanaged devices.
Considering rule order, attribute evaluation, and logical operators in ZPA Access Policies, which change best narrows access while minimizing unintended matches?

質問 72
Policy troubleshooting identifies inconsistent enforcement across web and private-application channels for a regulated data type. The inconsistency causes inefficient investigations and intermittent blocking.
Which action would most plausibly improve platform performance under this policy framework?

質問 73
SSH use or tunneling was detected and blocked by which feature?

質問 74
Which proprietary technology does Zscaler use to calculate risk attributes dynamically for websites?

質問 75
An administrator would like users to be able to use the corporate instance of a SaaS application. Which of the following allows an administrator to make that distinction?

質問 76
Which attack type is characterized by a commonly used website or service that has malicious content like malicious JavaScript running on it?

質問 77
Which of the following external-facing API gateways can enforce authentication for access to Zscaler Client Connector API resources?

質問 78
What is a ZIA Sublocation?

質問 79
A branch office uses a trusted-network bypass that routes traffic directly to the internet. Incident reviews show that unmanaged laptops at the branch are reaching SaaS applications without device-posture evaluation.
Which action should the administrator take next to ensure that devices are compliant before receiving access?

質問 80
Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS includes which of the following?

質問 81
Is SCIM mandatory for ZIA?

質問 82
Which type of attack plants malware on commonly accessed services?

質問 83
The Zscaler Gen AI Security Report gives visibility and insight into an organization’s use of generative AI applications. What kind of log will include Prompt for administrators to view for different prompts entered by users in those applications?