A company is migrating from an on-premises firewall to Prisma Access. They have a complex security policy with hundreds of rules. They want to ensure that the migration is accurate and that no traffic is inadvertently allowed or blocked. What is the most effective way to validate the policy in Prisma Access before cutting over?

Rely on the 'Traffic Logs' to see if any traffic is being blocked after the cutover.

Use the 'Policy Optimizer' feature to identify unused rules and remove them.

Deploy Prisma Access in a test mode and send sample traffic through it to verify the policy.

Manually recreate all rules in Prisma Access and compare them side-by-side.

A security analyst is investigating a potential data exfiltration incident. They suspect a remote user is sending sensitive data to a personal cloud storage service. They have access to Prisma Access logs. Which log type would provide the most detailed information about the data being transferred?

Data filtering logs, which show the content of files and data being transferred.

URL filtering logs, which show the websites visited by the user.

Traffic logs, which show the source, destination, and application.

Threat logs, which show if any malware or exploits were detected.

What is the purpose of using a private application access policy in Prisma Access?

To encrypt all traffic between users and the internet

To monitor user behavior on social media

To translate private IP addresses to public ones

To control which users can access specific private applications

What is the purpose of a NAT policy in Prisma Access?

To translate source or destination IP addresses in traffic

To encrypt traffic between remote users and the internet

How does Prisma Access enable secure access to private applications hosted in a data center?

By installing a GlobalProtect client on the application server

By using an IPsec tunnel from the data center to Prisma Access

By publishing the application on a public IP address

Palo Alto NetworksCertified Network Security Professional

Domain 2Objective 3

2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 3)

Part of the NGFW and SASE Solution Functionality domain, which accounts for 13% of the NETWORK-SECURITY-PROFESSIONAL exam.

31questions here

7free pages

8concepts

13%of the exam

Questions 11–15

11expert · hard
A company is migrating from an on-premises firewall to Prisma Access. They have a complex security policy with hundreds of rules. They want to ensure that the migration is accurate and that no traffic is inadvertently allowed or blocked. What is the most effective way to validate the policy in Prisma Access before cutting over?
Select an answer first
12expert · hard
A security analyst is investigating a potential data exfiltration incident. They suspect a remote user is sending sensitive data to a personal cloud storage service. They have access to Prisma Access logs. Which log type would provide the most detailed information about the data being transferred?
Select an answer first
13foundation · easy
What is the purpose of using a private application access policy in Prisma Access?
Select an answer first
14foundation · easy
What is the purpose of a NAT policy in Prisma Access?
Select an answer first
15foundation · easy
How does Prisma Access enable secure access to private applications hosted in a data center?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.