Online ZDTA Questions Video

Tenant Restriction is the ZIA feature that enforces access control policies to prevent access to certain SaaS applications from unmanaged or non-compliant devices. This ensures that only authorized and managed devices can access sensitive corporate SaaS resources, enhancing security posture.

The study guide highlights Tenant Restriction as an essential control for enforcing device compliance in SaaS access policies.

SSH tunneling falls under unsanctioned protocol use, which Zscaler’s Cloud App Control feature detects via deep packet inspection and then blocks according to policy.

Administrators can build custom dictionaries by defining the exact keywords, phrases, or regex patterns that reflect their organization’s sensitive data. Zscaler then uses these dictionaries in its data‑in‑motion policies to accurately identify and block or protect matching content.

In SaaS Security API DLP policies you can choose “Remove External Collaborators and Shareable Link” as the enforcement action - Zscaler will report the incident, revoke any external collaborators on the file, and delete its external share links.