Exclude top domain but protect all sub domains with zero trust

What is the name of the domain?

domain.com

What is the issue you’re encountering

Exclude Domain.com but secure every sub.domain.com

Is it posible to Exclude just domain.com and secure every sub.domain with zero trust?