A company has remote users who need to access internal applications and also use the internet. The security team wants to enforce DLP on all web traffic, but they also want to minimize the load on the VPN gateway. Which solution should they choose?

GlobalProtect with split tunnel and explicit proxy for web traffic

A company has remote users who need to access internal resources and also use the internet for personal browsing. The security team wants to minimize the load on the corporate VPN gateway while still securing access to internal resources. Which solution should they implement?

GlobalProtect with split tunnel

A company has a mix of managed corporate laptops and unmanaged personal devices used by executives. The executives need to access a sensitive web application that stores financial data. The security team wants to enforce DLP and prevent data exfiltration, but they do not want to install any software on the personal devices. Which solution should they choose?

Prisma Browser for the unmanaged devices and Prisma Access Agent for the managed laptops

GlobalProtect with full tunnel for all devices

Palo Alto NetworksCertified Network Security Architect

Domain 5Objective 1

5.1 Evaluate Prisma Browser, Prisma Access Agent, Explicit Proxy, and GlobalProtect Use Cases NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Part of the Mobile User Security domain, which accounts for 7% of the NETWORK-SECURITY-ARCHITECT exam.

16questions here

4free pages

5concepts

7%of the exam

Questions 11–15

11foundation · easy
A security policy requires that all internet traffic from remote users be inspected for threats, even if the destination is not a corporate resource. Which GlobalProtect tunnel mode should be used?
Select an answer first
12expert · hard
A company has remote users who need to access internal applications and also use the internet. The security team wants to enforce DLP on all web traffic, but they also want to minimize the load on the VPN gateway. Which solution should they choose?
Select an answer first
13application · medium
A company has remote users who need to access internal resources and also use the internet for personal browsing. The security team wants to minimize the load on the corporate VPN gateway while still securing access to internal resources. Which solution should they implement?
Select an answer first
14foundation · easy
A company wants to provide secure access to cloud applications for its employees' company-issued laptops, with the ability to enforce data loss prevention (DLP) policies on the traffic. The laptops are managed by the organization. Which solution is most appropriate?
Select an answer first
15application · hard
A company has a mix of managed corporate laptops and unmanaged personal devices used by executives. The executives need to access a sensitive web application that stores financial data. The security team wants to enforce DLP and prevent data exfiltration, but they do not want to install any software on the personal devices. Which solution should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.

5.1 Evaluate Prisma Browser, Prisma Access Agent, Explicit Proxy, and GlobalProtect Use Cases NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

A security policy requires that all internet traffic from remote users be inspected for threats, even if the destination is not a corporate resource. Which GlobalProtect tunnel mode should be used?

A company has remote users who need to access internal applications and also use the internet. The security team wants to enforce DLP on all web traffic, but they also want to minimize the load on the VPN gateway. Which solution should they choose?

A company has remote users who need to access internal resources and also use the internet for personal browsing. The security team wants to minimize the load on the corporate VPN gateway while still securing access to internal resources. Which solution should they implement?

A company wants to provide secure access to cloud applications for its employees' company-issued laptops, with the ability to enforce data loss prevention (DLP) policies on the traffic. The laptops are managed by the organization. Which solution is most appropriate?

Keep studying — Mobile User Security