How does a Zscaler administrator troubleshoot a certificate pinned application?
A.
They could look at SSL logs for a failed client handshake.
B.
They could reboot the endpoint device.
C.
They could inspect the ZIA Web Policy.
D.
They could look into the SaaS application analytics tab.
The Answer Is:
A
This question includes an explanation.
Explanation:
Certificate pinning prevents SSL interception by validating a server’s certificate against known values. When ZIA performs SSL inspection, it substitutes the certificate with one signed by Zscaler’s CA. This causes the handshake to fail for pinned applications. To troubleshoot, an administrator shouldreview SSL logs to identify handshake failures, which indicate certificate pinning issues. Logs will show the TLS negotiation details, including any disruptions.
[Reference: Zscaler Digital Transformation Study Guide – SSL Inspection and Threat Protection > Troubleshooting Certificate Pinned Applications, =================]
ZDTA PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"