Cloudflare Zero Trust case studies
Cloudflare Zero Trust · Put your knowledge to work in context.
The Cloudflare Zero Trust exam validates practical knowledge of Cloudflare's Zero Trust platform, which combines ZTNA, SWG, DEX, and CASB & DLP capabilities on a single global network. This independent study guide is designed for security engineers, network architects, and IT administrators who are implementing or evaluating Zero Trust architectures and want to demonstrate competence with Cloudflare's approach. The exam covers four domains, each weighted at 25%: ZTNA (identity-aware access that retires VPNs), SWG (secure web gateway controls for internet traffic), DEX (digital experience monitoring for users and devices), and CASB & DLP (cloud access security broker and data loss prevention). Questions test your ability to configure policies, troubleshoot access issues, and apply Zero Trust principles in real-world scenarios. The Cloudflare Zero Trust case studies are 5 cases and about 2,720 words.
1Contractor Access to a Header-Authenticated Wiki
Northwind has 420 employees and 60 contractors. Its internal wiki runs on nginx behind an old reverse proxy that trusts an X-Auth-User header.
603 words, about 3 min2Blocking Personal Cloud Storage in a Guest-Heavy Branch
Contoso's Manila branch has 180 staff and a guest Wi-Fi network. Corporate laptops run WARP in Gateway with DNS and HTTP filtering; guest devices do not.
574 words, about 3 min3SaaS Latency Spike After an ISP Change
Fabrikam has 250 users in Singapore. Since the ISP circuit was changed two weeks ago, users report Salesforce is slow between 09:00 and 11:00.
527 words, about 3 min4Publicly Shared HR Files and a Noisy DLP Rule
Litware has 1,200 users on Microsoft 365 and Google Workspace. A CASB API scan finds 3,400 files with public links; 200 contain national ID numbers.
529 words, about 3 min5Acquisition Merge with Overlapping Private IP Ranges
After acquiring Contoso, Northwind has two identity providers: Okta for 900 parent users and Entra ID for 300 acquired users. Both networks use 10.0.0.0/16; the acquired ERP is at 10.10.5.20, and a parent file server is at 10.10.8.10.
487 words, about 2 min