Why would an enterprise architect use a Zero Trust Network Access (ZTNA) connector instead of a service connection for private application access?

Question

Options

• AIt controls traffic from the mobile endpoint to any of the organization's internal resources.
• BIt functions as the attachment point for IPSec-based connections to remote site or branch
• CIt supports traffic sourced from on-premises or public cloud-based resources to mobile users and
• DIt automatically discovers private applications and suggests Security policy rules for them.

• A
  13% (3)
• B
  8% (2)
• C
  4% (1)
• D
  75% (18)

Explanation

The ZTNA connector's key differentiating capability is automated private application discovery (D). It scans the connected network segment, identifies private applications running there, and can suggest Security policy rules based on what it finds - reducing manual configuration overhead and improving policy accuracy. A service connection (the alternative) is a network-level IPSec tunnel that provides broad IP connectivity between Prisma Access and a data center; it does not perform application discovery. Option A describes general ZTNA behavior rather than a connector-specific differentiator. Option B describes a service connection's role. Option C also describes service connection characteristics.

No community discussion yet for this question.