T Techclick ← All lessons
Zscaler · ZIA + ZPA · Interactive lesson

Finish Zscaler topic by topic

Twelve lessons. Three cores (ZIA path, ZPA path, troubleshooting desk) plus deep-dives. Mark complete as you pass each quiz. Dummy company: Apex Freight.

12 min read · L2 primary · Quiz at end

⚡ Quick Answer

Complete Zscaler ZIA, ZPA and troubleshooting topic by topic. Tick lessons as you finish. Infographics, runbooks, scenario quizzes.

After this page you can

How to finish Zscaler on Techclick

Do the three operator path lessons in order: ZIA, then ZPA, then the troubleshooting desk. Deep-dive blogs are optional after each core. Tick Mark complete on this page — it stays in your browser.

Hero · two paths
ZIA internet path versus ZPA private-app path
ZIA is internet and SaaS. ZPA is private apps. If you mix them on a ticket, you will change the wrong policy.
Flow 1 · split the ticket before you touch policy
What is broken? Internet / SaaS or private app? ZIA desk ZPA desk Slow? → ZDX hop

Never mix the three in one guess. Outlook web = ZIA. SAP on an internal FQDN = ZPA. “Everything slow” = ZDX hop before any disable.

Flow 1 · ZIA packet path
User + ZCC or GRE/PAC Public SE known location? Policy stack FW → SSL → ATP URL / Cloud App DLP → allow/block Internet / SaaS

Firewall module first, then web module. If firewall blocks, URL policy never runs. Source: ZIA Policy Leading Practices — Order of Operations.

Say this out loud

ZIA inspects internet. ZPA brokers private apps. ZDX tells me which hop is slow. I split the ticket before I touch config.

0 / 12 topics complete

ZIA

1 · ZIA operator path

Architecture, forwarding, policy, SSL, threat, DLP — finish this first.

Open lesson
ZIA deep

2 · GRE vs IPSec vs PAC

Choose the forwarding method and prove the location.

Open lesson
ZIA deep

3 · SSL inspect traps

Decrypt vs exemption, root CA, pinned apps.

Open lesson
ZIA deep

4 · DLP and CASB

Inline DLP vs out-of-band CASB.

Open lesson
ZPA

5 · ZPA operator path

Connector → server group → segment → access policy.

Open lesson
ZPA deep

6 · App segments

Wildcard vs specific FQDN and port conflict.

Open lesson
ZPA deep

7 · App Connector deploy

Provision, group, health, mapping.

Open lesson
ZPA deep

8 · Access policy

No match = deny. Empty Connector.

Open lesson
ZIA+ZPA

9 · Troubleshooting desk

Split ZIA vs ZPA vs ZDX. Three live tickets.

Open lesson
ZIA TS

10 · ZIA command center

Web Insights, SSL, PAC, tunnel down.

Open lesson
ZPA TS

11 · ZPA command center

Diagnostics, status codes, connector empty.

Open lesson
Shared

12 · ZCC install desk

Tunnel up, Trusted Network, module split.

Open lesson
Decision feel
Three paths from one decision
Path A internet (ZIA), Path B private app (ZPA), Path C slowness (ZDX). The troubleshooting lesson trains this split.

What “complete” means

A topic is complete when you can: say the one-line concept, draw the path, do the runbook on a dummy (Priya / Apex Freight), and pass that lesson’s quiz at 6/8 or better.

Course map

Paid live class is 21 modules on the Zscaler syllabus. These lessons are the public student path that matches those modules.

Proof desk
Operator verifying a green health state
Green in the portal is not proof. Quote a log field or a ZDX hop.

After the three cores

Interview out loud on /zscaler-interview-hub. Exam drills on exam.techclick.in.

Knowledge check

Two-minute check before you start module 1.

Q1

Priya: ZCC green, OWA spins, Teams works. Which desk?

Correct: b. OWA is internet/SaaS — ZIA. Teams working only proves ZCC is alive.
Q2

Aditya: ZCC green, SAP internal FQDN dead. First console?

Correct: b. Private FQDN is ZPA. Diagnostics before pinging SAP.
Q3

Everything is slow since morning. First move?

Correct: c. Name the hop. Disable is not a diagnostic.
Q4

What does Mark complete on this page store?

Correct: b. Local only — good for study tracking, not an official cert.
Q5

ZIA policy: URL allow but traffic still blocked. Likely?

Correct: b. Firewall then web. URL never runs if FW blocked it.
Q6

ZPA empty Connector + Close means?

Correct: b. Empty Connector is eligibility/mapping, not app ping.
Q7

Best first core lesson?

Correct: b. ZIA path, then ZPA path, then the desk.
Q8

Proof of a ZIA allow is?

Correct: b. Quote the log fields.

Sources

Related: ZIA path · ZPA path · Troubleshooting desk · Interview hub