What are the building blocks of App Protection?

In Zscaler's App Protection framework, the three fundamental building blocks follow a specific hierarchy: Profiles define user/group classifications, Controls specify the security mechanisms and restrictions, and Policies bind profiles to controls with defined conditions and actions. This order reflects the logical flow of implementation - first identifying who (Profiles), then what restrictions apply (Controls), and finally how they're enforced (Policies). This structured approach ensures comprehensive application security across the Zero Trust Digital Transformation Engine.

A. Controls, Profiles, Policies - Incorrect order; profiles must be defined before applying controls.

B. Policies, Controls, Profiles - Reversed order; policies cannot exist without first defining profiles and controls.

C. Traffic Inspection, Vulnerability Identification, Action Based on User Behavior - These are security functions, not the structural building blocks of App Protection.

1. Zscaler App Protection Architecture Guide, Section 3.2 "Building Blocks Overview," pp. 45-47

2. Zscaler ZDTE Implementation Handbook, Chapter 7 "App Protection Components," paragraphs 7.1-7.3

3. Zero Trust Application Security Framework, Zscaler Technical Documentation, Doc ID: ZTAF-2023-04, Section 4

4. Zscaler Cloud Security Platform Documentation, "App Protection Configuration," v2023.2, pp. 112-115

5. ZDTE Best Practices Guide, "Application Protection Architecture," Section 5.4, Zscaler Official Documentation