What is the primary purpose of Prisma Access in a Palo Alto Networks SASE architecture?

To act as a cloud-based logging and reporting tool that analyzes traffic from existing firewalls

To replace the need for any on-premises firewall by providing a virtual firewall instance for each user

To provide a cloud-delivered security service that protects users and branch offices wherever they connect

To provide a secure web gateway that only filters internet traffic for remote users

A security administrator is troubleshooting an issue where a remote user cannot access a specific website. The user is connected to Prisma Access. Which tool should the administrator use to see if the traffic was blocked by a security policy?

The Prisma Access 'Monitor' tab, specifically the 'Traffic' logs.

The NAT policy configuration in Prisma Access.

The IPsec tunnel status on the corporate firewall.

The GlobalProtect client logs on the user's laptop.

A company is deploying Prisma Access for remote users. They want to use SAML-based authentication with their existing identity provider (IdP). What must be configured in Prisma Access to enable this?

A RADIUS server profile that points to the IdP.

A GlobalProtect portal setting that bypasses authentication for trusted users.

A local user database with the same usernames and passwords as the IdP.

An authentication profile that references the SAML IdP and a corresponding IdP configuration.

Where are security policies defined and managed for Prisma Access?

In Panorama, which pushes policies to Prisma Access

On each user's GlobalProtect client

In the Prisma Access mobile app

A company uses Prisma Access for its remote users. They want to ensure that all users have access to a specific public SaaS application (e.g., Salesforce) and that traffic to this application is inspected by the security stack. What is the most efficient way to configure this in Prisma Access?

Create a security policy rule that allows all traffic to the application's IP address range.

Set up a GlobalProtect portal rule that only allows traffic to the SaaS application.

Add the application to the 'Public Applications' list and create a security policy rule that allows it.

Configure a NAT policy to translate the source address of all users to a single public IP.

Palo Alto NetworksCertified Network Security Professional

Domain 2Objective 3

2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 2)

Part of the NGFW and SASE Solution Functionality domain, which accounts for 13% of the NETWORK-SECURITY-PROFESSIONAL exam.

31questions here

7free pages

8concepts

13%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of Prisma Access in a Palo Alto Networks SASE architecture?
Select an answer first
7application · medium
A security administrator is troubleshooting an issue where a remote user cannot access a specific website. The user is connected to Prisma Access. Which tool should the administrator use to see if the traffic was blocked by a security policy?
Select an answer first
8application · medium
A company is deploying Prisma Access for remote users. They want to use SAML-based authentication with their existing identity provider (IdP). What must be configured in Prisma Access to enable this?
Select an answer first
9foundation · easy
Where are security policies defined and managed for Prisma Access?
Select an answer first
10application · medium
A company uses Prisma Access for its remote users. They want to ensure that all users have access to a specific public SaaS application (e.g., Salesforce) and that traffic to this application is inspected by the security stack. What is the most efficient way to configure this in Prisma Access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.