Option A is the one I remember from a mock. The Forwarding Profile deals with what happens when DTLS can't be set up, usually falling back to TLS. It's specific about DTLS, not TLS in general. I think A is spot on here but if someone has evidence for D, happy to hear it.
Had something like this in a mock and A was the answer there too. Forwarding Profile is mainly about managing how ZCC should react if DTLS fails, so fallback from UDP to TCP (DTLS to TLS) is key. The other options are more about PAC files which aren't Forwarding Profile settings. Pretty sure it's A but open to correction if someone has seen different behavior.
I don't think it's D, since that's more generic about TLS tunnels. The Forwarding Profile in Zscaler specifically sets what to do if a DTLS tunnel can't be created, so A fits better here. Sometimes people mix up TLS and DTLS, easy trap. Pretty sure A is correct but open to other reasoning if folks disagree.
