What is a recommended approach for designing security policies in an integrated Prisma SD-WAN and Prisma Access deployment?

Avoid using groups to keep policies simple

Use the same policy for all branches regardless of their security needs

Place the broadest rules at the top to catch all traffic

Place the most specific rules at the top of the rulebase

A security admin is troubleshooting an issue where traffic from a specific branch is not being blocked by a security policy in Prisma Access, even though the policy is configured correctly. What should they check first?

The policy order in Prisma Access

The SaaS application's security settings

The branch's local firewall rules

An organization uses Prisma SD-WAN with Prisma Access. They have branch users accessing SaaS applications and want to ensure that only specific traffic (e.g., Office 365) is sent to Prisma Access for security inspection, while other internet traffic goes directly from the branch. Which integration mode should they use?

Local internet breakout without Prisma Access

Service connection with full tunnel

Service connection with policy-based routing

Where are security policies enforced for traffic originating from Prisma SD-WAN branches in an integrated deployment?

At the internet service provider's edge

At the Prisma Access cloud security layer

What is the effect of using a service connection to route traffic to Prisma Access?

Traffic is routed to a data center for on-premises firewall inspection

Traffic is dropped unless a local security policy is configured

Traffic bypasses security inspection and goes directly to the internet

Traffic is encrypted and sent to Prisma Access for security enforcement

Palo Alto NetworksCertified SD-WAN Engineer

Domain 4Objective 1

4.1 Explain the Integration of Prisma SD-WAN with Prisma Access and Security Policy Setup SD-WAN-ENGINEER Practice Questions (Page 3)

Part of the Unified SASE domain, which accounts for 14% of the SD-WAN-ENGINEER exam.

23questions here

5free pages

5concepts

14%of the exam

Questions 11–15

11foundation · easy
What is a recommended approach for designing security policies in an integrated Prisma SD-WAN and Prisma Access deployment?
Select an answer first
12expert · hard
A security admin is troubleshooting an issue where traffic from a specific branch is not being blocked by a security policy in Prisma Access, even though the policy is configured correctly. What should they check first?
Select an answer first
13application · medium
An organization uses Prisma SD-WAN with Prisma Access. They have branch users accessing SaaS applications and want to ensure that only specific traffic (e.g., Office 365) is sent to Prisma Access for security inspection, while other internet traffic goes directly from the branch. Which integration mode should they use?
Select an answer first
14foundation · easy
Where are security policies enforced for traffic originating from Prisma SD-WAN branches in an integrated deployment?
Select an answer first
15foundation · easy
What is the effect of using a service connection to route traffic to Prisma Access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SD-WAN-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SD-WAN-ENGINEER” is a trademark of its owner, used for identification only.