How does Prisma Access route traffic from a mobile user to an internal resource located in an on-premises data center?

Through a dedicated MPLS circuit

Through a secure IPsec tunnel to the data center

Through a GlobalProtect gateway in the data center

Through the public internet without encryption

A company is deploying GlobalProtect for mobile users. They want to ensure that users are authenticated using SAML and that the authentication is enforced at the gateway level. What should the architect configure?

Use a local authentication database on the gateway for authentication.

Configure SAML on the portal only, and rely on the portal to authenticate users.

Configure SAML on both the portal and the gateway, and set the gateway to require authentication.

Configure SAML on the gateway only, and use a pre-logon tunnel for the portal.

A mobile user reports that they can connect to Prisma Access but cannot access any internal resources. The architect checks the GlobalProtect logs and sees that the user is authenticated and the tunnel is up. What should the architect check next?

Ask the user to reconnect to a different Prisma Access location.

Check the user's HIP status to ensure the device is compliant.

Verify that the security policy allows the user's traffic to the internal resources.

Verify that the service connection to the internal network is up.

In Prisma Access, which deployment model provides mobile users with access to both internet and internal resources through a single GlobalProtect connection?

Virtual Private Cloud (VPC) deployment

Palo Alto NetworksCertified Network Security Architect

Domain 5Objective 3

5.3 Architect Prisma Access Mobile Users NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Part of the Mobile User Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

25questions here

5free pages

6concepts

7%of the exam

Questions 1–5

1foundation · easy
How does Prisma Access route traffic from a mobile user to an internal resource located in an on-premises data center?
Select an answer first
2application · medium
A company is deploying GlobalProtect for mobile users. They want to ensure that users are authenticated using SAML and that the authentication is enforced at the gateway level. What should the architect configure?
Select an answer first
3expert · hard
A mobile user reports that they can connect to Prisma Access but cannot access any internal resources. The architect checks the GlobalProtect logs and sees that the user is authenticated and the tunnel is up. What should the architect check next?
Select an answer first
4foundation · easy
In Prisma Access, which deployment model provides mobile users with access to both internet and internal resources through a single GlobalProtect connection?
Select an answer first
5foundation · easy
Which Prisma Access tool provides real-time visibility into mobile user connections, including tunnel status and traffic volume?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.