5.3 Architect Prisma Access Mobile Users NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has mobile users who need to access both internal resources and the internet. They want to ensure that internal traffic is routed through the data center, while internet traffic is routed directly from Prisma Access. What should the architect configure?

   • ARoute all traffic directly from Prisma Access to the internet, and use a VPN for internal traffic.
   • BConfigure service routes for internal traffic to go through the data center, and use Local Cloud for internet traffic.
   • CUse a single service route for all traffic to the data center.
   • DRoute all traffic through the data center to ensure consistent security.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company wants to enforce different security policies for mobile users based on their location. For example, users in the US should have access to a specific SaaS application, while users in Europe should be blocked. What is the most effective way to achieve this in Prisma Access?

   • ACreate separate security policy rules for each Prisma Access location and assign them to the respective gateways.
   • BConfigure the GlobalProtect app to send the user's GPS coordinates to Prisma Access for policy enforcement.
   • CUse a single security policy rule that matches the user's IP address and allow or deny based on the source IP.
   • DUse a security policy rule that matches the user's domain and allow or deny based on the domain.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A mobile user is unable to connect to Prisma Access. The architect checks the GlobalProtect logs and sees that the user is failing authentication. The user is using SAML authentication. What should the architect check first?

   • ACheck the security policy to ensure the user is allowed to connect.
   • BCheck the user's HIP status to ensure the device is compliant.
   • CVerify that the user's device has a valid certificate.
   • DVerify that the SAML identity provider is reachable from the user's network.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An architect is designing Prisma Access for a company that has mobile users in multiple regions. They want to ensure that users in each region connect to the nearest Prisma Access location to minimize latency. They also want to ensure that if a location fails, users automatically connect to the next nearest location. What should the architect configure?

   • AConfigure a single GlobalProtect portal with multiple gateways, and enable the 'failover to next available gateway' option.
   • BConfigure a separate GlobalProtect portal for each region, and instruct users to select the correct portal.
   • CConfigure a single gateway in a central location and rely on the user's internet connection for performance.
   • DUse a DNS load balancer to distribute users to the nearest Prisma Access location.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which security policy type in Prisma Access is specifically designed to control traffic from mobile users?

   • ANAT policy
   • BDecryption policy
   • CSecurity policy
   • DQoS policy
   Reveal Solution Discussion Select an answer first