The Zscaler Cloud Firewall is a component of the Zscaler Zero Trust Exchange platform and is built upon four key policy enforcement engines. These engines work together to provide comprehensive security and control over all network traffic. The four engines are: the DNS Control Module, the Firewall Control Module, the Intrusion Prevention System (IPS) Control Module, and the Web Control Module. Each engine is responsible for inspecting and applying policy to specific types of traffic, ensuring granular control and multi-layered threat protection.

A. This is incorrect; the Zscaler Firewall has four documented key engines, not three.

B. This is incorrect; the Zscaler Firewall has four documented key engines, not two.

C. This is incorrect; the Zscaler Firewall has four documented key engines, not five.

1. Zscaler Help Portal, "About Cloud Firewall," Section: "Cloud Firewall Architecture." This document explicitly lists and describes the four key engines: "The Cloud Firewall has four key engines that work in tandem: DNS Control Module, Firewall Control Module, IPS Control Module, and Web Control Module."

2. Zscaler, "Cloud Firewall Datasheet." The datasheet describes the capabilities that map to these four engines, including "DNS security," "Cloud IPS," "full-featured firewall," and integration with the "secure web gateway (SWG)."