1.6 Configure and Manage Private Application Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   A ZTNA Connector is showing as 'disconnected' in the Prisma Access console. What is the most likely cause?

   • AThe connector cannot reach the Prisma Access cloud over the internet.
   • BThe user's device is not compliant.
   • CThe private application is down.
   • DThe security policy is blocking the connector's traffic.
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A company is setting up Prisma Access for private application access. They have multiple remote users who need to access applications in a data center. They want to ensure that all traffic to the data center is encrypted and goes through Prisma Access. What is the role of a service connection in this scenario?

   • AIt authenticates remote users before they access the applications.
   • BIt provides a public IP for the data center's applications.
   • CIt performs SSL inspection on traffic to the applications.
   • DIt provides an encrypted tunnel from Prisma Access to the data center.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company has a colocation facility that is already connected to Prisma Access via Colo-Connect. They are experiencing high latency to applications in the colo. They suspect the issue is due to the path traffic takes. What is the most effective way to improve performance?

   • ASwitch to a ZTNA Connector in the colo.
   • BIncrease the bandwidth of the colo's internet connection.
   • COptimize the routing by ensuring the colo's router advertises the most specific routes.
   • DAdd an additional Colo-Connect connection from a different Prisma Access location.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company has two service connections to the same data center for redundancy. They are using BGP to advertise the same subnets from both connections. They want to ensure that traffic is load-balanced across both connections. What must be configured?

   • AEqual BGP metrics (MED, local preference) and allow ECMP on Prisma Access.
   • BDifferent BGP metrics to prefer one connection over the other.
   • CA policy-based route to send traffic based on source IP.
   • DA single static route with a next hop of the service connection.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is deploying Prisma Access to provide secure access to applications hosted in their on-premises data center. They have already configured a service connection to the data center. Now they need to ensure that traffic from remote users to a specific private application is routed through Prisma Access and then over the service connection. What must be configured to achieve this?

   • AA NAT policy that translates the user's source IP to the service connection's IP address.
   • BA global protect rule that assigns the user to a specific gateway that has the service connection attached.
   • CA security policy rule that allows the traffic and a routing table entry that points the application's subnet to the service connection.
   • DA DNS proxy rule that resolves the application's hostname to the service connection's IP address.
   Reveal Solution Discussion Select an answer first