2.3 Explain the Function of Prisma Access (e.g., Remote User Configuration, Remote Network Configuration, Public and Private Application Access, Security and NAT Policy Implementation, Monitoring and Logging) NETWORK-SECURITY-PROFESSIONAL Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In the Prisma Access architecture, what is the role of the service connections and locations?

   • AThey define the geographic regions where Prisma Access is deployed and how remote networks connect to it
   • BThey are the IP addresses assigned to remote users for authentication
   • CThey are used only for logging and monitoring traffic flows
   • DThey are the physical firewall appliances deployed in each branch office
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary function of a security policy in Prisma Access?

   • ATo inspect and control traffic based on defined rules
   • BTo provide a backup of the configuration
   • CTo manage the lifecycle of the GlobalProtect client
   • DTo assign IP addresses to remote users
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company hosts a private application in an on-premises data center. They want remote users to access this application securely through Prisma Access without exposing the application to the public internet. Which configuration is required?

   • ACreate a security policy rule that allows all traffic from the internet to the application's public IP address.
   • BEstablish an IPsec tunnel from the data center to Prisma Access and advertise the application's private IP address.
   • CUse a NAT policy to translate the application's private IP to a public IP on the Prisma Access firewall.
   • DDeploy a GlobalProtect client on the application server to allow remote access.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company is evaluating Prisma Access to provide security for both remote users and branch offices. They want a single solution that can enforce consistent security policies for all traffic, regardless of the user's location. What is the primary architectural benefit of Prisma Access that enables this?

   • AIt is a cloud-delivered service that provides a centralized point for policy enforcement.
   • BIt uses a dedicated physical firewall appliance at each location.
   • CIt requires all traffic to be routed through a single on-premises data center.
   • DIt provides a separate security policy for each location.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A retail chain with 50 branch offices is migrating to Prisma Access. Each branch has a Palo Alto Networks firewall. The network team wants to ensure that all branch traffic is inspected by Prisma Access, but they want to minimize the configuration overhead on each branch firewall. Which method should they use to connect the branches?

   • AConfigure a full mesh of IPsec tunnels between all branch firewalls.
   • BDeploy a GlobalProtect client on a server in each branch to forward traffic.
   • CUse the SD-WAN plugin on the branch firewalls to automatically establish IPsec tunnels to Prisma Access.
   • DCreate a single IPsec tunnel from the corporate headquarters to Prisma Access and route all branch traffic through it.
   Reveal Solution Discussion Select an answer first