4.1 Architect Prisma Access in Regional and Global Deployments NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary architectural consideration for ensuring data residency in a Prisma Access regional deployment?

   • AUsing a global deployment to allow data to be processed anywhere
   • BConfiguring a routing policy to send all traffic to a single region
   • CUsing IPsec tunnels to encrypt data in transit
   • DSelecting a region that is located within the required geographic boundary
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a multi-region Prisma Access deployment with locations in the US, Europe, and Asia. Users in Asia report that their traffic is being processed in the US location instead of the Asian location. The architect checks the GlobalProtect portal configuration and confirms that the routing policy is set to 'nearest location'. The architect also confirms that the users' IP addresses geolocate to Asia. What is the most likely cause of this issue?

   • AThe Asian Prisma Access location is at maximum capacity, so traffic is being offloaded to the US location.
   • BThe Asian location is not included in the GlobalProtect portal's location list, so users are being routed to the default US location.
   • CThe users are connecting through a corporate VPN that terminates in the US, so their traffic appears to originate from a US IP address.
   • DThe routing policy is configured to use 'external gateway' instead of 'internal gateway', which ignores user location.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A multinational company with 4,000 remote users is deploying Prisma Access. The security team requires that all traffic from users in Germany be processed in a data center located within the European Union to satisfy GDPR data-residency requirements. Users in Germany frequently travel to other EU countries for short business trips. The company wants to minimize latency for those traveling users while still meeting the residency mandate. Which deployment approach should the architect recommend?

   • ADeploy a global Prisma Access configuration with locations in Germany and the United States, using the US location as a backup for all EU users.
   • BDeploy a global Prisma Access configuration with a single service location in Germany and force all EU users to that location.
   • CDeploy regional Prisma Access with service locations in Germany and the Netherlands, and configure GlobalProtect to route users to the nearest location while keeping German-resident users pinned to Germany.
   • DDeploy a single regional Prisma Access location in the Netherlands and configure all EU users, including German users, to connect there.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a multi-region Prisma Access deployment, how should remote networks be configured to ensure optimal performance?

   • AConnect all remote networks to a single service connection in one region
   • BUse a single IPsec tunnel for all remote networks
   • CUse GlobalProtect instead of service connections for all remote networks
   • DConnect each remote network to a single service connection in the nearest region
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An organization has users in Asia and Europe. To comply with data residency requirements, European user traffic must be processed in Europe. How can this be achieved?

   • AUse IPsec tunnels for European users and GlobalProtect for Asian users
   • BDisable routing policies and rely on the default nearest region
   • CConfigure a routing policy to send European users' traffic to the Europe region
   • DUse GlobalProtect to connect all users to the Asia region
   Reveal Solution Discussion Select an answer first