The scenario describes providing secure, temporary access to a third-party contractor using their own unmanaged device. Zscaler Privileged Remote Access (PRA) is designed for this exact use case. PRA provides agentless, browser-based access to specific internal applications, isolating the session from the contractor's device. This allows the administrator to grant granular, audited access without issuing a corporate laptop, installing a VPN client, or exposing the internal network, ensuring a zero-trust security posture.

A. SD-WAN is a technology for connecting corporate sites (e.g., branch offices to data centers) and is not used for individual user remote access.

B. A Branch Connector is a Zscaler appliance (virtual or physical) used to connect an entire branch office network to the Zscaler cloud, not for an individual contractor.

C. A Cloud Connector is used to extend the Zscaler Zero Trust Exchange to workloads running in public or private clouds, not for end-user access.

1. Zscaler Product Documentation. "Privileged Remote Access". The product overview explicitly states a key use case is "Third-Party Contractor Access" and that it can "Eliminate the need to issue managed laptops to third parties."

2. Zscaler Help Portal. "About Privileged Remote Access". The documentation describes PRA as providing "seamless and secure remote access to private apps for third-party users (e.g., contractors, vendors, etc.) from an unmanaged device."