Which component in the Prisma SD-WAN and Prisma Access integration provides cloud security services such as threat prevention and URL filtering?

The branch router's routing table

The Prisma Access cloud service

A network admin is configuring security policies in Prisma Access for traffic coming from Prisma SD-WAN branches. They have a rule that allows all traffic from the 'Finance' group, and a rule that blocks traffic to 'Social Media' for all users. What is the correct approach to ensure the block rule is enforced for Finance users?

Create a separate rule for Finance that also blocks social media

Place the block rule before the allow rule in the policy order

Place the allow rule before the block rule

Use a security profile group to override rule order

Which best practice helps ensure consistent security policy application across multiple Prisma SD-WAN branches?

Using security policy groups and templates

Configuring policies directly on each branch appliance

Using the same policy for all traffic regardless of source

Creating a unique security policy for each branch

A company has multiple branch sites with different security requirements. They want to use Prisma Access to enforce security policies. What is the recommended approach to manage policies efficiently?

Configure policies only on branch routers

Use a single policy for all branches regardless of requirements

Create a unique policy for each branch to meet specific needs

Create policy groups based on branch types and apply them to relevant branches

A branch user in a Prisma SD-WAN deployment attempts to access a website that is blocked by a security policy in Prisma Access. What happens to the traffic?

The traffic is allowed because the branch has local internet breakout

The traffic is forwarded to the destination and a log is generated

The traffic is dropped silently without any user notification

The traffic is blocked at Prisma Access and the user receives a block page

Palo Alto NetworksCertified SD-WAN Engineer

Domain 4Objective 1

4.1 Explain the Integration of Prisma SD-WAN with Prisma Access and Security Policy Setup SD-WAN-ENGINEER Practice Questions (Page 2)

Part of the Unified SASE domain, which accounts for 14% of the SD-WAN-ENGINEER exam.

23questions here

5free pages

5concepts

14%of the exam

Questions 6–10

6foundation · easy
Which component in the Prisma SD-WAN and Prisma Access integration provides cloud security services such as threat prevention and URL filtering?
Select an answer first
7application · medium
A network admin is configuring security policies in Prisma Access for traffic coming from Prisma SD-WAN branches. They have a rule that allows all traffic from the 'Finance' group, and a rule that blocks traffic to 'Social Media' for all users. What is the correct approach to ensure the block rule is enforced for Finance users?
Select an answer first
8foundation · easy
Which best practice helps ensure consistent security policy application across multiple Prisma SD-WAN branches?
Select an answer first
9application · medium
A company has multiple branch sites with different security requirements. They want to use Prisma Access to enforce security policies. What is the recommended approach to manage policies efficiently?
Select an answer first
10application · medium
A branch user in a Prisma SD-WAN deployment attempts to access a website that is blocked by a security policy in Prisma Access. What happens to the traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SD-WAN-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SD-WAN-ENGINEER” is a trademark of its owner, used for identification only.