4.3 Determine Private Application Access Through Prisma Browser NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A financial services firm is using Prisma Browser to provide access to a sensitive internal trading application. The compliance team requires that all data displayed in the browser cannot be copied to the local clipboard or downloaded to the user's device. Which Prisma Browser security feature should be enabled to meet this requirement?

   • AConfigure the browser to run in kiosk mode, which disables all local device interactions.
   • BEnable data loss prevention (DLP) policies that block sensitive data from being copied or downloaded.
   • CUse a virtual desktop infrastructure (VDI) to host the browser session.
   • DEnable browser isolation so that all content is rendered on the server side.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which security control is applied by Prisma Browser to prevent data exfiltration from private applications?

   • AFirewall rules that block all outbound traffic from the browser session.
   • BData loss prevention (DLP) policies that monitor and restrict data transfer.
   • CEndpoint detection and response (EDR) agents installed on the user's device.
   • DNetwork segmentation that isolates the user's device from the internet.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An organization is deploying Prisma Browser for a group of users who need access to a private application. The application is hosted in a different cloud provider and is accessed via a public IP address. The security team wants to ensure that the application is not accessible directly from the internet. What is the best approach?

   • AMove the application to the corporate data center.
   • BEnable MFA for the application's login page.
   • CUse a VPN to connect the cloud provider to the corporate network.
   • DConfigure the application's security group to only allow traffic from Prisma Access egress IPs.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization is deploying Prisma Browser for a group of users who need access to a private application that is hosted on-premises. The application uses a non-standard port (e.g., TCP 8443). The security team wants to ensure that the application is accessible through Prisma Browser. What is the most important configuration step?

   • ADefine the private application in Prisma Access with the correct internal IP and port (8443).
   • BConfigure the user's browser to allow pop-ups for the application's domain.
   • CInstall a certificate on the user's device for the application's domain.
   • DEnsure that the application's firewall allows traffic from the user's public IP addresses.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   How does Prisma Browser integrate with SSE to provide private application access?

   • AIt only works with on-premises applications and cannot access cloud-hosted private applications.
   • BIt replaces the SSE data plane with a dedicated browser-based proxy for all traffic.
   • CIt uses SSE policies to route traffic from the browser session to private applications, applying security controls inline.
   • DIt requires a separate identity provider (IdP) that is not integrated with SSE.
   Reveal Solution Discussion Select an answer first