5.3 Architect Prisma Access Mobile Users NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   An organization is onboarding remote users to Prisma Access. They want to ensure that only corporate-managed devices can connect, and they need to enforce a security policy that blocks access to a specific internal application for users on non-compliant devices. What should the architect configure?

   • AUse GlobalProtect with a pre-logon tunnel and a security policy that blocks all traffic from unknown users.
   • BEnable GlobalProtect with host information profile (HIP) checks and create a security policy that matches the HIP-based user group.
   • CConfigure a certificate profile on the portal and gateway, and use a security policy that matches the certificate subject.
   • DEnable GlobalProtect with a captive portal and a security policy that requires user authentication before access.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the purpose of configuring a GlobalProtect portal in Prisma Access for mobile users?

   • ATo distribute client configurations and certificates to mobile users
   • BTo provide a web interface for administrators to manage security policies
   • CTo host the GlobalProtect client software for download
   • DTo terminate VPN tunnels from mobile users
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A mobile user reports that they are experiencing slow performance when accessing internal resources through Prisma Access. The architect checks the GlobalProtect logs and sees that the user is connected to a Prisma Access location that is far from the user's physical location. What should the architect do to improve performance?

   • AAsk the user to reconnect to the same location.
   • BIncrease the bandwidth of the user's internet connection.
   • CDisable the security inspection for the user's traffic.
   • DConfigure the GlobalProtect app to connect to a closer Prisma Access location.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A remote user reports that they cannot connect to a specific internal application through Prisma Access, but they can connect to other internal resources. The architect checks the GlobalProtect logs and sees that the user's traffic is being denied by a security policy. What should the architect do to resolve this issue?

   • ACheck the user's HIP status and ensure the device is compliant.
   • BAsk the user to reconnect to a different Prisma Access location.
   • CVerify the service connection to the internal network is up.
   • DModify the security policy to allow the user's traffic to the application's IP address.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In Prisma Access, which security policy component is used to identify the source of mobile user traffic for policy enforcement?

   • ADestination port
   • BSource IP address
   • CApplication ID
   • DUser ID
   Reveal Solution Discussion Select an answer first