A company is deploying Prisma Access for remote users. They have a requirement that only users who are members of the 'Engineering' group should be able to access the corporate network. They also want to ensure that if a user's account is disabled in the identity provider, they lose access immediately. Which authentication method should they use?

SAML-based authentication with the identity provider.

Certificate-based authentication with client certificates.

Local authentication with a local user database.

RADIUS-based authentication with a RADIUS server.

A company has a private application hosted in a public cloud (e.g., AWS). They want remote users to access this application through Prisma Access. What is the most common way to connect the cloud VPC to Prisma Access?

Create an IPsec tunnel from the VPC's virtual gateway to Prisma Access.

Configure the application as a public application in Prisma Access.

Use a NAT policy on the Prisma Access firewall to translate the application's public IP.

Deploy a GlobalProtect client on a virtual machine in the VPC.

A company has a branch office in a region where the local internet service is unreliable. They want to connect this branch to Prisma Access to ensure that traffic is always inspected. Which feature of Prisma Access is designed to handle this scenario?

A NAT policy that can route traffic around the unreliable internet connection.

A GlobalProtect client that can be installed on the branch's router.

The ability to configure multiple IPsec tunnels with automatic failover.

The use of a single, dedicated MPLS circuit for all branch traffic.

A company is configuring Prisma Access for remote users. They want to ensure that users in the 'Finance' group can access the 'QuickBooks' application, but they cannot access 'Social Media' applications. What is the most effective way to implement this requirement?

Use the GlobalProtect portal to restrict which applications are available to the 'Finance' group.

Configure a NAT policy to block access to 'Social Media' applications for the 'Finance' group.

Create a single security policy rule that allows 'QuickBooks' and denies 'Social Media' in the same rule.

Create a security policy rule that allows 'QuickBooks' for the 'Finance' group and a separate rule that denies 'Social Media' for the same group.

Palo Alto NetworksCertified Network Security Professional

Domain 2Objective 3

2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Part of the NGFW and SASE Solution Functionality domain, which accounts for 13% of the NETWORK-SECURITY-PROFESSIONAL exam.

31questions here

7free pages

8concepts

13%of the exam

Questions 16–20

16expert · hard
A company is deploying Prisma Access for remote users. They have a requirement that only users who are members of the 'Engineering' group should be able to access the corporate network. They also want to ensure that if a user's account is disabled in the identity provider, they lose access immediately. Which authentication method should they use?
Select an answer first
17application · medium
A company has a private application hosted in a public cloud (e.g., AWS). They want remote users to access this application through Prisma Access. What is the most common way to connect the cloud VPC to Prisma Access?
Select an answer first
18foundation · easy
Which tool provides centralized monitoring and logging for Prisma Access?
Select an answer first
19application · medium
A company has a branch office in a region where the local internet service is unreliable. They want to connect this branch to Prisma Access to ensure that traffic is always inspected. Which feature of Prisma Access is designed to handle this scenario?
Select an answer first
20application · medium
A company is configuring Prisma Access for remote users. They want to ensure that users in the 'Finance' group can access the 'QuickBooks' application, but they cannot access 'Social Media' applications. What is the most effective way to implement this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-PROFESSIONAL” is a trademark of its owner, used for identification only.

2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 4)

Questions 16–20

A company has a private application hosted in a public cloud (e.g., AWS). They want remote users to access this application through Prisma Access. What is the most common way to connect the cloud VPC to Prisma Access?

Which tool provides centralized monitoring and logging for Prisma Access?

A company has a branch office in a region where the local internet service is unreliable. They want to connect this branch to Prisma Access to ensure that traffic is always inspected. Which feature of Prisma Access is designed to handle this scenario?

A company is configuring Prisma Access for remote users. They want to ensure that users in the 'Finance' group can access the 'QuickBooks' application, but they cannot access 'Social Media' applications. What is the most effective way to implement this requirement?

Keep studying — NGFW and SASE Solution Functionality