SCAZT Network And Cloud Security Practice Question
Which component is required to allow Umbrella to perform SSL decryption on web traffic?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deployment of the Umbrella Root CA
To perform SSL decryption, the Umbrella Root CA certificate must be installed on all client endpoints to prevent browser certificate warnings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DNS-over-HTTPS setup
Why it's wrong here
DoH is for DNS, not SSL inspection.
- ✗
VPN client configuration
Why it's wrong here
VPN is not required for SSL decryption.
- ✗
Public IP whitelisting
Why it's wrong here
This has no impact on certificate trust.
- ✓
Deployment of the Umbrella Root CA
Why this is correct
Trusting the Root CA is mandatory for man-in-the-middle decryption.
About these practice questions
One of 316 original SCAZT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This SCAZT practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SCAZT exam.