2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What type of information is typically found in Prisma Access traffic logs?

   • ASource and destination IP addresses, ports, and applications
   • BThe configuration of the GlobalProtect client
   • CUser passwords and authentication tokens
   • DThe full content of all emails sent by users
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses Prisma Access for remote users. They want to ensure that all traffic to a specific public IP address (e.g., a legacy application) is allowed, but they want to block all other traffic to that IP address. What is the most precise way to configure this?

   • AConfigure the IP address as a private application and use a security policy to allow it.
   • BUse a GlobalProtect portal rule to restrict access to the IP address.
   • CCreate a NAT policy that translates the destination IP address to a different address.
   • DCreate a security policy rule that allows all traffic to the IP address and a rule that denies all other traffic.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does Prisma Access provide secure access to public internet applications for remote users?

   • ABy using a public DNS service to filter malicious domains
   • BBy installing a firewall on the user's device
   • CBy routing user traffic through the cloud for security inspection
   • DBy creating a direct tunnel to each public application's server
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses Prisma Access for remote users. They have a public application that requires the user's source IP address to be preserved for logging and auditing. However, they also need to NAT the traffic to a different source IP for another application. How can they achieve this?

   • AConfigure the GlobalProtect client to use a different source IP for each application.
   • BUse a security policy rule to allow traffic to the application that needs the original IP, and a NAT policy for all other traffic.
   • CDisable NAT for all traffic and rely on the user's original IP address.
   • DConfigure a single NAT policy that translates the source IP for all traffic.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company uses Prisma Access for remote users. The users are assigned private IP addresses from a DHCP pool. The company wants to ensure that all outbound traffic from these users appears to come from a single public IP address when accessing the internet. What should they configure?

   • AAn IPsec tunnel configuration that changes the source address of the traffic.
   • BA NAT policy that translates the source address of the users to the public IP address.
   • CA security policy rule that allows all outbound traffic.
   • DA GlobalProtect portal configuration that assigns a public IP address to each user.
   Reveal Solution Discussion Select an answer first