Question 1

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B)
partners to their data centers.
* The solution must meet these requirements:
* The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
* The branch locations must have internet filtering and data center connectivity.
* The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
* The security team must have access to manage the mobile user and access to branch locations.
* The network team must have access to manage only the partner access.
Which two components can be provisioned to enable data center connectivity over the internet? (Choose two.)

Accepted Answer

Correct answer: CD

Question 2

What is the impact of selecting the ??Disable Server Response Inspection?? checkbox after confirming that a Security policy rule has a threat protection profile
configured?

Accepted Answer

Correct answer: C

Question 3

Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)

Accepted Answer

Correct answer: BC

Question 4

When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?

Accepted Answer

Correct answer: A

Question 5

From SurePassExam
https://www.surepassexam.com/SSE-Engineer-exam-dumps.html (50 New Questions)
An intern is tasked with changing the Anti-Spyware Profile used for security rules defined in the GlobalProtect folder. All security rules are using the Default Prisma
Profile. The intern reports that the options are greyed out and cannot be modified when selecting the Default Prisma Profile.
Based on the image below, which action will allow the intern to make the required modifications?

Accepted Answer

Correct answer: C

Question 6

A company has four branch offices between Canada Central and Canada East which use the same IPSec termination node and have QoS configured with
customized bandwidth per site. An engineer wants to onboard a new branch office on the same IPSec termination node.
What is the QoS behavior for the new branch office?

Accepted Answer

Correct answer: B

Question 7

All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine.
Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful
authentication, and they receive this error message:
Error: Prisma Access Portal Authentication Failed using CIE-SAML with message ??400 Bad Request??
Which action will identify the root cause of this error?

Accepted Answer

Correct answer: C

Question 8

What is the purpose of embargo rules in Prisma Access?

Accepted Answer

Correct answer: C

Question 9

What will cause a connector to fail to establish a connection with the cloud gateway during the deployment of a new ZTNA Connector in a data center?

Accepted Answer

Correct answer: B

Question 10

Which feature will fetch user and group information to verify whether a group from the Cloud Identity Engine is present on a security processing node (SPN)?

Accepted Answer

Correct answer: A