4.1 Explain the Integration of Prisma SD-WAN with Prisma Access and Security Policy Setup SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A branch user in a Prisma SD-WAN deployment accesses a SaaS application. The traffic is sent to Prisma Access for security inspection. Which component applies the security policy to this traffic?

   • AThe ISP's network
   • BPrisma Access cloud security service
   • CThe branch SD-WAN router
   • DThe SaaS application's own security
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is deploying Prisma SD-WAN at 50 branch offices and wants to enforce consistent security for all branch internet-bound traffic. They have chosen to use Prisma Access for cloud-delivered security. Which architectural component is responsible for forwarding branch traffic to Prisma Access for security inspection?

   • AThe branch firewall's local security policy, which inspects all traffic before it leaves the branch
   • BThe Prisma Access gateway's routing table, which automatically pulls traffic from all branches without configuration
   • CThe SD-WAN fabric, using the service connection to route traffic to Prisma Access
   • DThe SD-WAN plugin on each branch router, which inspects traffic locally and sends only logs to Prisma Access
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   In Prisma Access, how are security policies evaluated for traffic from Prisma SD-WAN branches?

   • ABased on the time the policy was created
   • BIn the order they appear in the policy rulebase, from top to bottom
   • CBased on the priority assigned to each branch site
   • DIn random order based on the source IP address
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a Prisma SD-WAN and Prisma Access integration, what is the primary role of the SD-WAN fabric?

   • ATo manage security policies centrally for all branches
   • BTo replace the need for a cloud security service by providing on-premises firewalling
   • CTo connect branch sites to the nearest Prisma Access location for cloud-delivered security
   • DTo provide the security enforcement point for all branch traffic
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which integration mode in Prisma SD-WAN allows branch traffic to be forwarded to Prisma Access for security processing?

   • ACloud blade
   • BSite-to-site VPN
   • CService connection
   • DLocal breakout
   Reveal Solution Discussion Select an answer first