Zscaler’s Shadow IT and Data Discovery capabilities are delivered primarily through its multimode CASB and data protection services. Shadow IT Discovery automatically identifies unsanctioned cloud applications in use and evaluates them across a large set of risk attributes (for example, security controls, compliance posture, data handling, and business continuity).

Updated Zscaler training and exam content for the Digital Transformation Engineer track describes a significantly expanded cloud app catalog, allowing visibility into up to 100,000 applications and evaluation across approximately 200 risk attributes. This scale is necessary to cover the rapidly growing SaaS ecosystem and to give security teams the granularity needed to distinguish between low-risk and high-risk services.

Earlier public materials referenced smaller catalogs (for example, 8,500 apps with 25 attributes), but the current exam-aligned figures reflect the evolution of Zscaler’s data protection and Shadow IT intelligence. Options A, B, and C therefore underrepresent the scope of Zscaler’s catalog and risk model. In the context of the ZDTE curriculum, the correct pairing is 100K apps and 200 risk attributes, which best matches how Zscaler positions its Shadow IT and Data Discovery capabilities for broad visibility and fine-grained risk analysis.