ZDTA study guide
ZDTA · Work through your exam, one topic at a time.
The Zscaler Digital Transformation Administrator (ZDTA) credential is aimed at IT and security practitioners who run day-to-day operations on the Zscaler Zero Trust Exchange. It sits at the administrator level: rather than asking you to design a zero trust roadmap from scratch, it tests whether you can configure, operate and troubleshoot the platform the way a working admin does. The ZDTA study guide has 6 sections and about 2,059 words.
01Zero Trust Architecture and the Zscaler Zero Trust Exchange
Zero Trust replaces the assumption that inside the network equals trusted with continuous verification of user, device, and application context on every request. Name the design principles explicitly: verify explicitly, grant least privilege, assume breach.
326 words, about 2 min02Zscaler Internet Access (ZIA): policy, security and data protection
ZIA enforces several policy types, each with its own ordered rule list: URL Filtering and Cloud App Control for web and SaaS, File Type Control, Firewall Filtering, IPS and Advanced Threat Protection, Sandbox, DLP, and Bandwidth Control, plus SSL/TLS Inspection and Forwarding Control, which determine what can be seen and where traffic goes. Within each policy, rules evaluate top-down and the first match wins.
365 words, about 2 min03Zscaler Private Access (ZPA): application access and segmentation
ZPA replaces inbound VPN access with an outbound-only model. The App Connector, deployed close to the applications, opens outbound connections to the Zscaler cloud (public service edges, or private service edges you host).
349 words, about 2 min04Zscaler Digital Experience (ZDX): monitoring and troubleshooting
ZDX turns endpoint telemetry into per-user, per-application quality scores so you can answer the question 'is the problem the device, the network path, or the application?' The Client Connector collects metrics along the path: Wi-Fi signal and interference, DNS resolution time, TCP connect time, TLS handshake time, HTTP request and response time, page load, and - for private apps - ZPA performance. Cloud Path monitoring probes the legs from the device to the Zscaler service edge and from the service edge to the destination.
336 words, about 2 min05Zscaler Client Connector and traffic forwarding
The Zscaler Client Connector is the endpoint agent that authenticates the user, applies device posture, and forwards traffic. Its behaviour comes from an App Profile containing forwarding settings: whether to tunnel web traffic to ZIA, private-app traffic to ZPA, telemetry to ZDX, and which traffic to send natively.
338 words, about 2 min06Administration, reporting and operational best practices
Administration starts with least privilege. Understand the admin role hierarchy - super admin versus scoped administrative roles versus read-only/auditor roles - and that role scope determines which policies can be viewed and changed.
345 words, about 2 min