Zscaler Certified Technology Associate (ZDTA) — Question 54

You are planning to use Z-Tunnel 2.0 as the forwarding mechanism in order to support any TCP. UDP, or ICMP traffic going to ZIA. What type of tunnel will Zscaler Client Connector form with the Zero Trust Exchange?

Answer options

• A. TLS with fallback to DTLS
• B. DTLS with fallback to TLS
• C. TLS with fallback to IPSEC
• D. DTLS with fallback to IPSEC

Correct answer: B

Explanation

The correct answer is B because Z-Tunnel 2.0 primarily establishes a DTLS tunnel for low-latency connections, and it falls back to TLS when necessary. Options A, C, and D are incorrect as they either suggest the wrong primary tunnel type or an incorrect fallback mechanism.