SSE-Engineer practice questions 41–50

1. Question 41 · 56 in bank

   Which feature within Strata Cloud Manager (SCM) allows an operations team to view applications, threats, and user insights for branch locations for both NGFW and Prisma Access simultaneously?

   • ACommand Center
   • BLog Viewer
   • CBranch Site Monitor
   • DSASE Health Dashboard

   Show answer

   Answer: A

   Next question

2. Question 42 · 56 in bank

   In addition to creating a Security policy, how can an AI Access Security be used to prevent users from uploading financial information to ChatGPT?

   • AApply File Blocking to stop file uploads containing financial information.
   • BConfigure an Enterprise DLP rule to block uploads containing financial information.
   • CAdd the ChatGPT domains using URL Filtering to block uploads containing financial information.
   • DApply a vulnerability profile to stop attempts to exploit system flaws or gain unauthorized access to financial systems.

   Show answer

   Answer: B

   Next question

3. Question 43 · 56 in bank

   Which statement is valid in relation to certificates used for GlobalProtect and pre-logon?

   • AA public certificate authority (CA) must sign and validate all certificates used.
   • BThe certificate used for pre-logon must include both Subject and Subject-Alt fields.
   • CCertificates must be deployed in the Machine Certificate Store.
   • DThe GlobalProtect agent may be used to distribute pre-logon certificates.

   Show answer

   Answer: C

   Next question

4. Question 44 · 56 in bank

   What must be configured to accurately report an application's availability when onboarding a discovered application for ZTNA Connector?

   • Aicmp ping
   • Bhttps ping
   • Ctcp ping
   • Dudp ping

   Show answer

   Answer: C

   Next question

5. Question 45 · 56 in bank

   All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive this error message: Error: Prisma Access Portal Authentication Failed using CIE-SAML with message “400 Bad Request” Which action will identify the root cause of this error?

   • AVerify the SAML metadata configuration in both Strata Cloud Manager and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.
   • BExamine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.
   • CVerify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.
   • DReview the Authentication logs in Strata Cloud Manager to check for any SAML error messages or authentication failures.

   Show answer

   Answer: C

   Next question

6. Question 46 · 56 in bank

   Select 2

   An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up. Which two elements must the engineer validate to solve the issue? (Choose two.)

   • ASecret
   • BMRAI Timers
   • CPeer AS Number
   • DAdvertise Default Route Checkbox

   Show answer

   Answer: AC

   Next question

7. Question 47 · 56 in bank

   In an Explicit Proxy deployment where no agent can be used on the endpoint, which authentication method is supported with mobile users?

   • ALDAP
   • BKerberos
   • CSAMLD. SSO

   Show answer

   Answer: C

   Next question

8. Question 48 · 56 in bank

   Which advanced AI-powered functionality does Strata Copilot provide to enhance the capabilities of Prisma Access security teams?

   • AReal-time traffic analysis for automated threat prevention
   • BInitial configuration of Prisma Access using a natural language interface
   • CCustomized guidance for resolving issues through recommended next steps
   • DAutomated remediation of misconfigured security policies

   Show answer

   Answer: C

   Next question

9. Question 49 · 56 in bank

   Where are tags applied to control access to Generative AI when implementing AI Access Security?

   • ATo Generative AI applications for identifying sanctioned, tolerated, or unsanctioned applications
   • BTo security rules for defining which types of Generative AI applications are allowed or blocked
   • CTo user devices for identifying and controlling which Generative AI applications they can access
   • DTo Generative AI URL categories for classifying trusted and untrusted Generative AI websites

   Show answer

   Answer: A

   Next question

10. Question 50 · 56 in bank

    How can an engineer use risk score customization in SaaS Security Inline to limit the use of unsanctioned SaaS applications by employees within a Security policy?

    • ALower the risk score of sanctioned applications and increase the risk score for unsanctioned applications.
    • BIncrease the risk score for all SaaS applications to automatically block unwanted applications.
    • CBuild an application filter using unsanctioned SaaS as the category.
    • DBuild an application filter using unsanctioned SaaS as the characteristic.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SSE-Engineer practice, question 41. 56 questions available.