=, + @zscaler| academy E Exam You have passed the test! Your score: 55 of 60 Correct (91%) Elapsed time: 1 hour, 3 minutes 60 of 60 questions answered Hide Answers Question 1: v Correct answer Which Client Connector tunnel option supports IP unicast applications on any protocol or port? Tunnel with Z-Tunnel 2.0 Question 2: w Correct answer Which statement about Zscaler Client Connector App profiles is correct? ‘A Forwarding Profile can be attached to one or more App profiles Question 3: w Correct answer NextSet the Captive Portal fail open interval to Question 4: v Correct answer What Zscaler PAC file macros can be used to identify a user's egress IP address? ‘S${SRCIP} Question 5: v Correct answer In the Zscaler Client Connector Portal when configuring the ‘Client Connector IdP', how is a ‘Device Token’ used? ‘The token value is passed to Client Connector during installation to allow a silent authentication to the Client Connector dP Question 6: v Correct answer How many virtual NICs are needed for the NSS VM? Question 7: v Correct answer When does BW Control become active? Only when Bandwidth contention is present Question 8: v Correct answer Which Client Connector forwarding method requires the $(ZAPP_LOCAL_PROXY) macro to be defined in the applied PAC fle? NextTunnel With Local Proxy Question 9: v Correct answer Where do you configure the IP-based bypasses for Client Connector Z-Tunnel 2.0 connections? In the applied App Profile Question 10: v Correct answer Which methods can be used to Synchronize with the Directory Server? (select all that apply) ‘On-demand Via configured sync interval Within the setup wizard Question 11: v Correct answer How many departments can a user belong to? Question 12: v Correct answer How do you remove a Client Connector device immediately from the Zscaler Client Connector Portal? Use the Force Remove' option in the ‘Device details’ Question 13: v Correct answer NextFor which 2 Client Connector Internet Access forwarding modes is the Windows Packet Filter Based driver used for? Choose two. Z-Tunnel 2.0 Z-Tunnel 1.0 Question 14: v Correct answer When configured to use DTLS, what 2 fall back forwarding methods are available with Client Connector using Z-Tunnel 2.0? Choose two TMs Tunnel 1.0 Question 15: v Correct answer GRE tunnels are created and made to appear in the Admin UI by (select all that apply): The customer administrator in the Admin UI Zscaler Technical Support Question 16: v Correct answer Where are Z-Tunnel 2.0 Application Bypasses configured for Client Connector? In the applied App Profile Question 17: v Correct answer What is the default value for the Zscaler Client Connector device limit? Next16 Question 18: v Correct answer What 3 states are enabled by default in the 'Enrolled Devices’ list of the Zscaler Client Connector Portal? Choose three Updated Removal Pending Outdated Question 19: x Incorrect answer Which Client Connector forwarding option sends all HTTP and HTTPS traffic regardless of port to Zscaler in a Z Tunnel? ‘Tunnel with Local Proxy Question 20: v Correct answer Where is BW Control enabled? Under the Location Question 21: x Incorrect answer To disable the Force Remove Oldest Devices option in the Zscaler Client Connector Portal, what value must you select for the setting? Never Question 22: x Incorrect answer What are the possible synchronization intervals? (select all that apply) NextDaily Monthly Weekly Custom time period Question 23: v Correct answer (On what Android devices can you install Zscaler Client Connector with configuration options from an MDM platform? Android Enterprise devices Question 24: v Correct answer Which suffix to the PROXY statements is required in an APP Profile PAC file to ensure effective load-balancing of Client Connector users? Fx Question 25: v Correct answer When deploying SAML with AD where are users passwords added or modified? AD Question 26: v Gorrect answer What type of tunnel is a Z-Tunnel 1.0 tunnel used for Internet Security? Lightweight, unencrypted HTTP CONNECT tunnel Question 27: v Correct answer NextWhat 4 forwarding options are available for Zscaler Internet Access traffic in a Client Connector Forwarding Profile? Choose four None Tunnel (Z-Tunnel 1.0 of Z-Tunnel 2.0) Tunnel with Local Proxy Enforce Proxy Question 28: v Correct answer Which tool allows AD sync without opening any inbound ports on the Firewall, Zscaler Authentication Bridge Question 29: v Correct answer Between what 2 values can the Zscaler Client Connector ‘Collect Route Information’ option be set, for Network Performance monitoring? Choose two 1440 Question 30: v Correct answer How frequently does 8W Control check for contention? ‘Once per second Question 31: v Correct answer What 2 options are available for configuring a Zscaler Client Connector User Agent suffix? Choose two Global Based Next DomiQuestion 32: v Correct answer What is a potential security threat from DNS tunnel traffic? Botnet control of an infected machine. Question 33: v Correct answer How many Device Tokens can you create for Client Connector IdP authentication? Question 34: v Correct answer Which component of the Zscaler architecture inserts the authentication cookie into the user's browser? ZEN Question 35: v Correct answer What 3 ‘Proxy Action Types’ are supported when configuring Client Connector with the Tunnel option? Choose three Never Enforce ‘Apply on Network Change Question 36: v Correct answer ‘When using the ‘Group Based’ Zscaler Client Connector SW update method, where must the groups be defined? In the ZIA Hosted DB NextQuestion 37: v Correct answer Which environment is supported in a production environment for ZAB deployment? ESX / ESXi Question 38: v Correct answer Where do you enable Z-Tunnel 2.0 for Client Connector users? In the applied Forwarding Profile Question 39: v Correct answer Which Client Connector forwarding option sends all unicast IP traffic regardless of port to Zscaler? Z-Tunnel 2.0 Question 40: v Correct answer How many VMs total are required for a two node cluster with load balancing? Question 41: v Correct answer What is the recommended way to configure the loopback connection for the Zscaler App's Tunnel with Local Proxy’ Internet access forwarding mode? Gateway macro function ${ZAPP_LOCAL_PROXY) Question 42: v Correct answer Next How do you configure Multi-Connect in a Client Connector Tunnel 2.0 environment?‘The same way as Domain-based bypasses Question 43: v Correct answer What are the required components to do SAML authentication? (select all that apply) idP Service Provider Directory store Client Question 44: x Incorrect answer What 4 actions can you take within Client Connector to try to fix it before raising a support case? Choose four Check for App Policy updates Repair the App Check for App Updates Restart the App Service Question 45: ¥ Correct answer Which statement about a Client Connector Forwarding Profile PAC file is correct? It is applied to the System to update any existing System Proxy settings Question 46: v Correct answer How many NSS VMs may be active at a time? Question 47: v Correct answer Which takes precedence in BW Rules? NextMin BW setting Question 48: v Correct answer Which user provisioning methods can be used in conjunction with Kerberos? (select all that apply) SAML Hosted DB Active Directory Question 49: v Correct answer ZIA may be configured to provide security and optimization of DNS traffic. Which types of DNS traffic flow through ZIA? (Choose two) DNS lookup traffic to a public DNS server DNS tunneling traffic Question 50: v Correct answer What port does Zscaler listen on for proxy traffic by default when using the Tunnel With Local Proxy forwarding option? 9000 Question 51: v Correct answer What traffic does Client Connector forward to the ZIA cloud when configured for Tunnel 2.07 AILIP unicast traffic regardless of protocol or port Next Question 52: v Correct answerHow is Internet Access traffic forwarded to Zscaler when Client Connector is configured for the ‘Enforce Proxy’ forwarding mode? HTTP/HTTPS traffic is proxied to Zscaler based on the specified PAC file Question 53: v Correct answer A single Service Edge VM provides throughput up to: 600Mbps. Question 54: v Correct answer What type of tunnel does Client Connector use by default when configured to use Z-Tunnel 2.0? Encrypted DTLS. Question 55: v Correct answer In Client Connector when functioning normally, what should the ‘Service Status’ indicate on the Internet Security, Private ‘Access and Digital Experience pages? ON Question 56: v Correct answer What 3 connectivity scenarios are configurable with Client Connector? Choose three (On Trusted Network Off Trusted Network NextVPN Trusted Network Question 57: x Incorrect answer Which description is the best fit for an App Profile applied to Zscaler Client Connector? A container for Zscaler Client Connector specific settings Question 58: v Correct answer What Internet Access traffic is tunneled by Client Connector when using the 'Z-Tunnel 1.0' forwarding mode? Port 80/443 traffic regardless of generating application Question 59: v Correct answer Which actions may be applied by a DNS filtering rule? (Choose four) Redirect request Block Allow Redirect response Question 60: v Correct answer How much memory is required to install Zscaler Client Connector on the iOS platform? 20MB C Take this test again Next