4.2 Explain the Configuration and Maintenance of Prisma Access (e.g., Security Policies, Profiles, Updates, Upgrades, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company needs to generate a report showing the top websites visited by users in the last month. Which Prisma Access feature should they use?

   • AUse the reporting feature to generate a URL filtering report.
   • BUse the configuration audit log to see which websites were configured.
   • CUse the system health dashboard to view website usage.
   • DUse the traffic logs to manually compile the list of websites.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has two security rules in Prisma Access: Rule 1 allows traffic to a specific business application, and Rule 2 blocks all traffic to a specific IP address range. Traffic to the business application is being blocked, even though Rule 1 should allow it. What is the most likely cause?

   • AThe traffic is not matching Rule 1 because the application is not correctly identified.
   • BRule 2 is placed before Rule 1 in the security policy, and the IP address range includes the business application's IP address.
   • CThe security profiles applied to Rule 1 are blocking the traffic.
   • DRule 1 is placed before Rule 2, but the business application's IP address is not in the allowed list.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is experiencing issues with Prisma Access after a recent content update. The issues include increased latency and some users unable to connect. What should the administrator do first to troubleshoot?

   • AContact Palo Alto Networks support without any investigation.
   • BImmediately roll back the content update to the previous version.
   • CCheck the system health dashboard and logs for any errors or anomalies related to the update.
   • DReboot the Prisma Access infrastructure.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A security team is investigating a possible breach. They suspect that a user's credentials were compromised and used to access a sensitive internal application. They need to determine if any data was exfiltrated. Which combination of logs and reports should they analyze?

   • ASystem health logs to check for any infrastructure issues.
   • BThreat logs only, as they show all security incidents.
   • CConfiguration audit logs to see if any policies were changed.
   • DTraffic logs for the user's sessions and a data filtering report to identify any sensitive data transfers.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company wants to protect its remote users from known exploits and malware. They have a security rule that allows all outbound traffic. What should they add to this rule to provide this protection?

   • AApply a file blocking profile to block all file downloads.
   • BEnable SSL decryption on the rule to inspect encrypted traffic.
   • CApply a URL filtering profile with a 'malware' category action of 'alert'.
   • DApply a vulnerability protection profile and an anti-spyware profile to the rule.
   Reveal Solution Discussion Select an answer first