Zscaler Advanced Threat Protection (ATP) is a security-focused module within Zscaler Internet Access (ZIA) designed to protect against sophisticated cyber threats. Its workflow includes Intrusion Prevention System (IPS) signatures, advanced URL filtering for high-risk categories like newly registered domains, and policies to block potentially malicious, unscannable files such as password-protected archives.

Reporting on application latency or performance issues, such as a poor Teams call due to a weak WiFi signal, is not a security function. This task falls under the domain of digital experience monitoring, which is handled by a separate Zscaler service, Zscaler Digital Experience (ZDX), not by the ATP security engine.

A. IPS is a fundamental component of Zscaler's layered defense and ATP, using signatures to block known exploits and threats targeting clients and servers.

C. Proactively categorizing and applying security policies to newly registered domains is a key ATP strategy to mitigate phishing and malware distribution campaigns.

D. Blocking password-protected files is a common security policy within ATP, as their contents cannot be inspected for malware, representing a significant risk.

1. Zscaler Help Portal

"About Advanced Threat Protection": This document outlines the core features of ATP

stating it provides "advanced protection against malicious content from websites

" including "protection against botnet command and control (C&C) networks" and "protection against phishing sites." It also details the integration of IPS controls. This confirms that options A and C are part of the ATP workflow.

2. Zscaler Help Portal

"About Zscaler Digital Experience": This resource describes ZDX as a "user-centric monitoring solution that provides end-to-end visibility of the user-to-app performance." It explicitly mentions monitoring for performance issues

which directly aligns with the scenario in option B and separates it from the security functions of ATP.

3. Zscaler Help Portal

"Configuring Malware Protection Policies": In the section on File Type Control

this guide explains the policy for handling unscannable files. It states

"Zscaler recommends that you block password-protected archives and documents because they cannot be scanned for viruses and spyware

" confirming that blocking such files (Option D) is a security function within ZIA's threat protection capabilities.