An App Connector is the ZPA component that sits near private applications and establishes outbound-only connections to the Zscaler cloud. It brokers application reachability without exposing inbound ports or public IP addresses, allowing users to connect to applications rather than networks. Option D (App Connectors mediate seamless communication for applications, services and data sources) is correct because App Connectors mediate communication to private applications, services, and data sources.
Why the other options are incorrect:
A). App Connectors enforce security policies for traffic destined for SaaS applications: SaaS applications are handled by ZIA controls such as URL Filtering, Cloud App Control, and DLP, not by ZPA App Connectors.
B). App Connectors enable user experience monitoring for all applications: User-experience monitoring is ZDX's job. App Connectors provide the outbound broker path that lets users reach private applications.
C). App Connectors expose a public IP for users to connect to for private application access: Publishing a public IP exposes an attack surface; ZPA avoids that by using inside-out connector connectivity.

The ZDX Score is calculated on a scale from 1 (worst) to 100 (best), where lower values indicate poorer digital experience and higher values indicate optimal performance.

Web Insights is the correct source because the event is an HTTP transaction evaluated by ZIA web policy. Its transaction data can identify the requested URL, user, action, URL category, bytes transferred, and policy- related fields needed to determine why the upload was allowed or blocked. Zscaler's Insights Logs overview identifies Web logs as the view for transactions initiated from devices, while the Web data types and filters reference documents category and matched-rule information. ZDX measures digital experience and network performance, not the web-policy disposition. DNS Insights focuses on name-resolution activity and cannot establish the HTTP upload action. Firewall Insights is appropriate for Cloud Firewall sessions, services, and firewall-rule matches, but Web Insights provides the transaction-level evidence required here.

To avoid prompting users with a cloud selection menu in the Zscaler Client Connector (ZCC), administrators shouldcustomize the MSI installation package with theCLOUDNAMEparameter. This setting ensures the ZCC automatically connects to the correct ZIA cloud instance without user intervention. The CLOUDNAME corresponds to the designated cloud name for the organization's ZIA tenant, effectively bypassing the prompt.
This is outlined under Zscaler's deployment and configuration instructions for ZCC.
Reference: Zscaler Digital Transformation Study Guide - Zscaler Internet Access (ZIA) > Deployment