Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Zscaler
Exam Format
Registration
Validity
Skills this practice test covers
- Describe what makes up an organization's attack surface.
- Sort cybersecurity into its main types, such as network, cloud and endpoint security.
- Explain how cybersecurity frameworks and compliance standards guide a business.
- Match common cyberattacks, such as phishing, ransomware and DDoS, to how they work.
- Apply cyber safety measures such as password hygiene, updates and multi-factor authentication.
- Explain why zero trust checks every connection, unlike a perimeter-based model.
Explore related topics
EDU-102 exam content
9 domains · 12 topics · 133 of 150 questions sorted by domain
Describe cybersecurity and attack surface21 questions
This objective sets the base terms. Candidates describe what cybersecurity protects and what an attack surface is: every asset and entry point that an attacker could reach.
Skills tested
- Define cybersecurity in terms of confidentiality, integrity and availability.
- Identify the assets and exposures that make up an attack surface.
Questions by topic
- Cybersecurity definition4
- Attack surface8
- Assets and exposure7
- Confidentiality, Integrity, Availability (CIA)2
List the types of cybersecurity16 questions
Security splits into areas that protect different things. Candidates list these types and say what each one covers.
Skills tested
- Name the main types, such as network, application, cloud, endpoint and identity security.
- Match a protection need to the type of cybersecurity that handles it.
Questions by topic
- Categories of cybersecurity16
Discuss the importance of cybersecurity for businesses16 questions
This objective links security to business results. Candidates explain how a breach causes financial and reputational damage and puts business continuity at risk.
Skills tested
- Describe the financial and reputational damage that a data breach causes.
- Explain how security supports business continuity and regulatory obligations.
Questions by topic
- Why cybersecurity matters to organizations16
Describe cybersecurity framework and compliance16 questions
A framework gives an organization a structured way to manage security, and compliance means meeting the rules that apply to it. Candidates describe both and how they relate.
Skills tested
- Explain what a cybersecurity framework gives an organization.
- Describe compliance with regulations and standards, and the role of an audit.
Questions by topic
- Security frameworks and regulatory compliance16
Explain cyber threats, cyberattacks, and cybers attackers
This objective separates three ideas: a threat is a possible danger, an attack is the act, and an attacker is the person or group behind it. Candidates also explain what drives different threat actors.
Skills tested
- Separate a cyber threat from a cyberattack in a described case.
- Compare threat actors by their motivations, such as money, politics or disruption.
Official topics
- Threats, attacks, and threat actors
Discuss various types of cyberattacks16 questions
Candidates discuss the common forms of attack and how each one reaches its target. Several of them rely on tricking people instead of breaking technology.
Skills tested
- Describe phishing and other social engineering attacks.
- Explain how malware, ransomware, DDoS and man-in-the-middle attacks work.
- Explain why a zero-day attack is hard to defend against.
Questions by topic
- Attack techniques16
Define cyber safety and its measures16 questions
Cyber safety is the everyday behavior that keeps people and data safe. Candidates define it and list the measures that support it.
Skills tested
- Apply password hygiene and multi-factor authentication.
- Keep systems patched, browse safely and report suspicious messages.
Questions by topic
- Protective measures and safe behavior16
Discuss perimeter based and zero trust security models16 questions
This objective compares two ways to secure access. The perimeter-based model trusts what is inside the network, while zero trust verifies every request and grants least privilege.
Skills tested
- Explain the weakness of implicit trust inside a network perimeter.
- Describe the zero trust idea of never trust, always verify, with least privilege and microsegmentation.
Questions by topic
- Security model comparison16
Explain Zscaler Zero Trust Exchange16 questions
The last objective is the only one about Zscaler's own platform. Candidates explain how the Zscaler Zero Trust Exchange applies zero trust from the cloud and connects users securely to applications.
Skills tested
- Explain how the Zero Trust Exchange connects users to applications instead of to the network.
- List the advantages of Zscaler zero trust that the course presents.
Questions by topic
- Zscaler's zero trust platform16
Requirements
- Required: the Fundamentals of Cybersecurity (EDU-102) e-learning course before the test.
- No earlier security experience is expected, since this is a foundational test.
About the EDU-102 exam
EDU-102 checks a beginner's grasp of cybersecurity: what the attack surface is, which threats and attacks a business faces, and how zero trust differs from a perimeter-based model. It is a foundational Zscaler Cyber Academy test with nine objectives. Only the last objective is about Zscaler's own platform, and the rest cover security ideas that apply to any organization. Candidates first complete the matching e-learning course, and passing the test then earns the Fundamentals of Cybersecurity Certificate.
The PlanetCert practice test covers all nine objectives in similar depth, with a few more questions on the attack surface. The explanations help most where terms sit close together, such as a cyber threat and a cyberattack, or a framework and a compliance standard. Flashcard mode suits the attack types, and Study Mode suits the two zero trust objectives, where the reasoning matters more than the name. Brainy AI Assistant can explain how the Zscaler Zero Trust Exchange connects users to applications without placing them on the network.
How to earn the certification
- Earns
- Fundamentals of Cybersecurity CertificateFoundational
The certificate expires two years after completion, and passing the recertification exam keeps it valid for three more years.
- After
- ZDTA Zscaler Digital Transformation Administrator
Zscaler Cyber Academy's role-based administrator certification, earned through the Zscaler for Users – Administrator training.
- ZDTA Zscaler Digital Transformation Administrator
How to prepare for EDU-102
- 1
Finish the EDU-102 e-learning
The e-learning course is the required first step, and the certificate needs both the course and the test. Note the key terms of each objective while going through it.
- 2
Give every objective an example
For each of the nine objectives, write down one real case, such as a phishing email for social engineering or a lost laptop for the attack surface. Concrete cases make the definitions easier to recall.
- 3
Separate the look-alike terms
Threat, attack and attacker are three different things, and so are a framework and a compliance standard. Drill such pairs in flashcard mode until each one is easy to tell apart.
- 4
Sketch perimeter versus zero trust
Draw users behind a perimeter firewall, then the same users reaching applications through the Zscaler Zero Trust Exchange. Two objectives depend on explaining that difference.
- 5
Take the practice test last
Work through the EDU-102 practice test in Study Mode first, then once in Timed Mode. Ask Brainy AI Assistant to explain any wrong answer again with a fresh example.
Start a timed EDU-102run
Who EDU-102 is for
- People starting out in security who need the basic terms and ideas first.
- Business and IT staff whose roles involve protecting company data.
- Zscaler Cyber Academy learners who begin at the foundational tier.
Typical job titles: Junior security analyst · IT support technician · Systems administrator · Security awareness coordinator
EDU-102 glossary
18 terms from the exam objectives and the vendor's official material, each defined in a sentence.
- Attack surface
- All the points where an attacker could try to get in or take data, such as devices, applications and user accounts.
- Compliance standards
- Outside rules and standards that an organization must meet when it handles data, often checked through an audit.
- Confidentiality, Integrity, Availability (CIA)
- The three goals of security: data stays private, stays correct, and stays usable when people need it.
- Cyber safety
- The everyday habits and measures that keep people, devices and data safe online, such as strong passwords and updates.
- Cyber threat
- Any possible danger that could harm systems or data, whether or not an attack has started.
- Cyberattack
- A deliberate attempt to break into, damage or disrupt systems, networks or data.
- Cybersecurity frameworks
- Structured sets of practices and controls that help an organization plan, measure and improve its security.
- Least privilege
- Giving each user or system only the access that its task needs, and nothing more.
- Multi-factor authentication
- A login check that needs two or more kinds of proof, such as a password and a code from a phone.
- Perimeter-based (castle-and-moat) model
- A security model that trusts everything inside the network edge and mainly defends that boundary, like a castle wall.
- Phishing
- A social engineering attack that uses a fake message, often an email, to make someone click a link or share a password.
- Ransomware
- Malware that encrypts or locks data and then demands a payment to restore it.
- Social engineering
- Tricking people into giving away information or access, instead of breaking the technology itself.
- Threat actors
- The people or groups behind cyberattacks, such as criminals, hacktivists, insiders and state-backed groups.
- Threat landscape
- The full set of current threats, attackers and attack methods that an organization faces at a given time.
- Zero trust model
- A security model that trusts no user or device by default and checks every request before it grants access.
- Zero-day
- A flaw that attackers use before the vendor knows about it or has released a fix.
- Zscaler Zero Trust Exchange
- Zscaler's cloud platform that applies zero trust to the connections between users, devices and applications.