A security architect needs to provide secure access to internal web applications for contractors who use unmanaged personal laptops. The solution must not require installing software on the contractors' devices. Which approach is most appropriate?

Deploy GlobalProtect with full tunnel mode on each contractor laptop

Use Prisma Access Agent to enforce security policies on the contractor laptops

Set up an explicit proxy on the corporate network and provide proxy settings to contractors

Configure Prisma Browser as the only approved browser for accessing internal web apps

An organization needs to ensure that all traffic from its managed Windows and macOS endpoints is inspected and policy-enforced, regardless of the application or destination. The solution must provide visibility into the user and device identity. Which deployment is best suited for this requirement?

Configure an explicit proxy on the network

Deploy Prisma Browser as the default browser on all endpoints

Install Prisma Access Agent on all endpoints

Use GlobalProtect with split tunnel

A company has 500 contractors who need access to a single SaaS HR portal. The contractors use personal, unmanaged laptops and must not be able to copy or download sensitive employee data from the portal. The company wants to avoid installing any software on the contractors' devices. Which solution should the company choose?

Deploy GlobalProtect with full tunnel and DLP

Deploy Prisma Browser with data-loss prevention policies for the HR portal

Install the Prisma Access Agent on each contractor laptop

Configure an explicit proxy in the contractor's browser

Palo Alto NetworksCertified Network Security Architect

Domain 5Objective 1

5.1 Evaluate Prisma Browser, Prisma Access Agent, Explicit Proxy, and GlobalProtect Use Cases NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Part of the Mobile User Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

16questions here

4free pages

5concepts

7%of the exam

Questions 1–5

1foundation · easy
A security architect needs to provide secure access to internal web applications for contractors who use unmanaged personal laptops. The solution must not require installing software on the contractors' devices. Which approach is most appropriate?
Select an answer first
2foundation · easy
An organization needs to ensure that all traffic from its managed Windows and macOS endpoints is inspected and policy-enforced, regardless of the application or destination. The solution must provide visibility into the user and device identity. Which deployment is best suited for this requirement?
Select an answer first
3expert · medium
A company has a group of executives who use personal tablets to access a sensitive web application. The security team wants to enforce DLP and prevent data exfiltration, but they also want to avoid installing any software on the tablets. Which solution should they choose?
Select an answer first
4application · medium
A company has 500 contractors who need access to a single SaaS HR portal. The contractors use personal, unmanaged laptops and must not be able to copy or download sensitive employee data from the portal. The company wants to avoid installing any software on the contractors' devices. Which solution should the company choose?
Select an answer first
5foundation · easy
A network administrator wants to route web traffic from specific applications on user workstations through Prisma Access for policy enforcement, without affecting other traffic. Which configuration is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

5.1 Evaluate Prisma Browser, Prisma Access Agent, Explicit Proxy, and GlobalProtect Use Cases NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

A security architect needs to provide secure access to internal web applications for contractors who use unmanaged personal laptops. The solution must not require installing software on the contractors' devices. Which approach is most appropriate?

An organization needs to ensure that all traffic from its managed Windows and macOS endpoints is inspected and policy-enforced, regardless of the application or destination. The solution must provide visibility into the user and device identity. Which deployment is best suited for this requirement?

A company has a group of executives who use personal tablets to access a sensitive web application. The security team wants to enforce DLP and prevent data exfiltration, but they also want to avoid installing any software on the tablets. Which solution should they choose?

A network administrator wants to route web traffic from specific applications on user workstations through Prisma Access for policy enforcement, without affecting other traffic. Which configuration is most appropriate?

Keep studying — Mobile User Security