1.3 Configure and Deploy Prisma Access Service Infrastructure SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement accurately describes the Prisma Access service infrastructure?

   • AIt is a software-defined WAN solution that replaces all existing network routers.
   • BIt is an on-premises firewall appliance that must be deployed at each branch location.
   • CIt is a virtual firewall that runs only within a customer's own data center.
   • DIt is a cloud-delivered security service that provides consistent security policies across mobile users and remote networks.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is connecting its headquarters to Prisma Access using a service connection. The network team has configured an IPsec tunnel from the on-premises firewall to the Prisma Access service connection endpoint. The tunnel is up, but the remote network's routes are not being learned by Prisma Access. The on-premises firewall is configured for BGP. What should the administrator verify first?

   • AThat the IPsec tunnel is using IKEv2 rather than IKEv1.
   • BThat the service connection is enabled for the Mobile User service.
   • CThat the on-premises firewall has a static route to the Prisma Access service connection's public IP.
   • DThat the BGP peer IP address on the on-premises firewall matches the Prisma Access service connection's BGP peer address.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator has deployed Prisma Access and configured GlobalProtect for mobile users. A user reports that they can connect to the GlobalProtect gateway, but they cannot access the internet. The administrator checks the Prisma Access console and sees that the user is connected. What should the administrator check to validate the deployment?

   • AThe System logs to see if the user's connection was successful.
   • BThe GlobalProtect portal status to see if the portal is reachable.
   • CThe Traffic logs to see if the user's traffic is being processed and if any policy is blocking it.
   • DThe Service Connection status to see if the remote network is connected.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which settings are part of configuring GlobalProtect for Prisma Access?

   • AIPsec tunnel and BGP settings
   • BCompute location and region settings
   • CLog forwarding and alert settings
   • DPortal and gateway settings
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is setting up a new Prisma Access tenant. The administrator has logged into the Prisma Access console for the first time. Which initial configuration step is required before the administrator can begin deploying the service infrastructure?

   • ASelecting the license type and enabling the Prisma Access service.
   • BConfiguring a service connection to the corporate data center.
   • CProvisioning compute locations in all desired regions.
   • DCreating a GlobalProtect portal and gateway.
   Reveal Solution Discussion Select an answer first