Courseiva
Cloud Security ArchitecturehardMultiple ChoiceObjective-mapped

SCAZT Cloud Security Architecture Practice Question

When deploying a secure remote access solution, how do you handle 'Split Tunneling' safely in a Zero Trust environment?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Use a ZTNA agent to tunnel only application-specific traffic while keeping web traffic direct.

By using a ZTNA agent, you can define specific application tunnels, effectively creating a 'split' where only authorized traffic goes through the secure path while general web traffic goes direct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Disable split tunneling to ensure all traffic is inspected.

    Why it's wrong here

    This is inefficient and does not scale in a cloud-native model.

  • Use a ZTNA agent to tunnel only application-specific traffic while keeping web traffic direct.

    Why this is correct

    This allows for secure application access without hair-pinning all user traffic.

  • Force all traffic through the corporate VPN, regardless of destination.

    Why it's wrong here

    This creates massive latency and is not a ZTNA principle.

  • Allow all traffic to the internet without any inspection.

    Why it's wrong here

    This is a severe security risk.

About these practice questions

Courseiva writes every SCAZT question from scratch — 316 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Cisco exam blueprint

This SCAZT practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCAZT exam.