SSE-Engineer practice questions 21–30

1. Question 21 · 56 in bank

   How can role-based access control (RBAC) for Prisma Access (Managed by Strata Cloud Manager) be used to grant each member of a security team full administrative access to manage the Security policy in a single tenant while restricting access to other tenants in a multitenant deployment?

   • AAdd the team to the Parent Tenant, select the Prisma Access Configuration Scope, and set the role to Security Administrator.
   • BAdd the team to the Child Tenant, select All Apps & Services, and set the role to Security Administrator.
   • CAdd the team to the Parent Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.
   • DAdd the team to the Child Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.

   Show answer

   Answer: D

   Next question

2. Question 22 · 56 in bank

   An engineer configures a Security policy for traffic originating at branch locations in the Remote Networks configuration scope. After committing the configuration and reviewing the logs, the branch traffic is not matching the Security policy. Which statement explains the branch traffic behavior?

   • AThe source address was configured with an address object including the branch location prefixes.
   • BThe source zone was configured as “Trust.”
   • CThe Security policy did not meet best practice standards and was automatically removed.
   • DThe traffic is matching a Security policy in the Prisma Access configuration scope.

   Show answer

   Answer: D

   Next question

3. Question 23 · 56 in bank

   What is the flow impact of updating the Cloud Services plugin on existing traffic flows in Prisma Access?

   • AThey will experience latency during the plugin upgrade process.
   • BThey will automatically terminate when the upgrade begins.
   • CThey will be unaffected because the plugin upgrade is transparent to users.
   • DThey will be unaffected only if Panorama is deployed in high availability (HA) mode.

   Show answer

   Answer: C

   Next question

4. Question 24 · 56 in bank

   Which overlay protocol must a customer premises equipment (CPE) device support when terminating a Partner Interconnect-based Colo-Connect in Prisma Access?

   • AGeneve
   • BIPSec
   • CGRE
   • DDTLS

   Show answer

   Answer: C

   Next question

5. Question 25 · 56 in bank

   An engineer has configured IPSec tunnels for two remote network locations; however, users are experiencing intermittent connectivity issues across the tunnels. What action will allow the engineer to receive notifications when the IPSec tunnels are down or experiencing instability?

   • ACreate a new notification profile specifying conditions for remote network IPSec tunnels.
   • BCreate a tunnel log notification rule to alert on specified remote network IPSec tunnel conditions.
   • CSet up the operational health dashboard to email alerts for remote Network IPSec tunnel issues.
   • DSelect the IPSec tunnel monitoring and notifications checkbox when configuring the remote network IPSec tunnels.

   Show answer

   Answer: A

   Next question

6. Question 26 · 56 in bank

   Select 2

   Which two configurations must be enabled to allow App Acceleration for SaaS applications? (Choose two.)

   • AAcceleration agent for the client machines
   • BQoS for user traffic
   • CTrusted Root CA for the CA certificate
   • DForward Trust Certificate for the CA certificate

   Show answer

   Answer: CD

   Next question

7. Question 27 · 56 in bank

   Which statement applies when enabling multitenancy in Prisma Access (Managed by Panorama)?

   • AService connection licenses will be assigned only to the first tenant, and these service connections can be shared with the other tenants.
   • BA single tenant cannot consist solely of mobile users or solely of remote networks.
   • CEach tenant is allocated its own dedicated Prisma Access instances, with compute resources that are not shared across tenants.
   • DThere is flexibility to manage different tenants using separate Panoramas, which allows for better organization and management of the multiple tenants.

   Show answer

   Answer: C

   Next question

8. Question 28 · 56 in bank

   Select 2

   Which two statements apply when a customer has a large branch office with employees who all arrive and log in within a five-minute time period? (Choose two.)

   • ADNS results are only cached for frequently used hostnames.
   • BMaximum pending TCP DNS requests is 64.
   • CMaximum number of TCP DNS retries is 3.
   • DDNS results are cached for 300 seconds.

   Show answer

   Answer: BD

   Next question

9. Question 29 · 56 in bank

   A company has four branch offices between Canada Central and Canada East which use the same IPSec termination node and have QoS configured with customized bandwidth per site. An engineer wants to onboard a new branch office on the same IPSec termination node. What is the QoS behavior for the new branch office?

   • AAutomatically distributed to 25% for each site
   • BUnallocated until manually assigned
   • CAutomatically distributed to 20% for each site
   • DCannot be added to existing QoS configuration

   Show answer

   Answer: B

   Next question

10. Question 30 · 56 in bank

    A customer using Prisma Access (Managed by Panorama) wants to monitor traffic patterns across all remote networks and use Strata Logging Service to gather insights on network usage. An engineer notices that some network data is missing from the Application Command Center (ACC). What should the engineer do to ensure complete data visibility?

    • AReconfigure the Prisma Access remote networks to log directly to Panorama instead of using Strata Logging Service.
    • BVerify that the Panorama web interface has been configured to aggregate logs from both the Panorama data and RN-SPNs.
    • CEnable the “Use Data for Pre-Defined Reports” setting in the Logging and Reporting configuration on Panorama.
    • DEnsure that log forwarding profiles are applied to all Prisma Access policies and directed to Strata Logging Service.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SSE-Engineer practice, question 21. 56 questions available.