SSE-Engineer practice questions 51–56

1. Question 51 · 56 in bank

   Select 2

   An employee reports being unable to use any video conferencing features across various web-based collaboration tools. However, colleagues not using the Prisma Access Browser (PAB) can use these features without any problem. Which two policy rule types or categories control this configuration? (Choose two.)

   • ABrowser Security Controls
   • BBrowser Customization Controls
   • CAccess & Data Controls
   • DNetwork Security Controls

   Show answer

   Answer: AB

   Next question

2. Question 52 · 56 in bank

   An organization deploys the Prisma Access Browser (PAB) to secure web access from diverse endpoints, including personal devices where IT has limited control. To maintain a strong and proactive security posture across these varied environments, why is the use of PAB device posture attributes, such as OS version, file system encryption, and device type, considered essential?

   • AIt permits PAB to function as a standalone endpoint detection and response (EDR) solution.
   • BIt provides the administrators of PAB the ability to enable disk encryption on all endpoints.
   • CIt allows administrators to identify and restrict access based on OS version and browser type on unmanaged devices.
   • DIt enables the administrators of PAB to independently perform OS and browser patching on unmanaged devices.

   Show answer

   Answer: C

   Next question

3. Question 53 · 56 in bank

   Select 2

   A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to its data centers. The solution must meet these requirements: • The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations. • The branch locations must have internet filtering and data center connectivity. • The B2B partner connections must only have access to internally hosted proprietary applications running on non-standard ports. • There are overlapping prefixes advertised by the B2B partners. Which two actions will meet the customer requirements for the B2B connections? (Choose two.)

   • AAdvertise the corresponding network prefixes using eBGP or static routes.
   • BConfigure remote networks with NAT pools for each of the B2B connections.
   • CConfigure service connections for data center connectivity.
   • DNAT the traffic at the customer premises equipment (CPE).

   Show answer

   Answer: AB

   Next question

4. Question 54 · 56 in bank

   Select 2

   An administrator is configuring a dedicated visitor sign-in kiosk in the main corporate office using Prisma Access Browser (PAB). A key security requirement is to ensure the device is locked down, which includes preventing users from creating paper copies of any on-screen information. The policy must specifically apply to this fixed-location kiosk. Which two PAB match criteria will enforce these restrictions on the kiosk? (Choose two.)

   • AConfiguring the print control as the specific data control for the rule
   • BConfiguring the kiosk control, which prevents printing
   • CDefining the policy scope based on location, specifying the location of the corporate offices
   • DDefining the policy scope based on networks, specifying the corporate public IP range or CIDR

   Show answer

   Answer: AD

   Next question

5. Question 55 · 56 in bank

   Select 2

   What are two advantages the Prisma Access Browser (PAB) offers in providing consistent security for accessing web-based resources across corporate-managed laptops and personal devices, as well as contractors using devices issued by third parties? (Choose two.)

   • AIt enforces SSL Forward Proxy decryption to enable inspection of encrypted traffic, allowing for enhanced security and threat prevention capabilities.
   • BIt provides all users on any devices secure access to the internet with enhanced security and threat prevention capabilities for encrypted traffic.
   • CIt routes all traffic to Prisma Access to perform deep packet inspection of encrypted traffic, allowing for enhanced security and threat prevention capabilities.
   • DIt applies an encryption layer to protect all browser assets with a trusted encryption chain that is independent of the operating system.

   Show answer

   Answer: BD

   Next question

6. Question 56 · 56 in bank

   What is the network impact when a Prisma Access service connection is set as a dedicated service connection for traffic steering?

   • AIt maintains its zone as Trust and continues to participate in both internal and external BGP routing.
   • BIt changes its zone to Untrust. applies source NAT to forwarded traffic, and no longer participates in BGP routing.
   • CIt maintains its zone as Trust; however, it disables all Security policies, allowing unrestricted traffic flow through the dedicated service connection.
   • DIt applies destination NAT to forwarded traffic, maintains its BGP routing configurations, and allows traffic from both Trust and Untrust zones.

   Show answer

   Answer: B

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SSE-Engineer practice, question 51. 56 questions available.