1.6 Configure and Manage Private Application Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An admin has deployed a ZTNA Connector and configured a security policy to allow access to a private application. However, users are still unable to reach the application. What should the admin check next?

   • AThe user's local firewall settings.
   • BThe ZTNA Connector's registration status and health in the Prisma Access console.
   • CThe Prisma Access data center location.
   • DThe application's public DNS record.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company has deployed Colo-Connect to a colocation facility. They notice that traffic to applications in the colo is intermittently failing. What should they check first to troubleshoot the issue?

   • AThe status of the IPsec tunnel in the Colo-Connect monitoring dashboard.
   • BThe ZTNA Connector health in the colo.
   • CThe routing table on Prisma Access to verify the colo subnet is advertised.
   • DThe security policy logs to see if traffic is being denied.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When configuring a service connection in Prisma Access, which of the following is a required parameter?

   • AThe public IP address of the customer's VPN gateway.
   • BThe internal IP address of the application server.
   • CThe user's email domain for authentication.
   • DThe name of the Prisma Access region where the user is located.
   Reveal Solution Discussion Select an answer first
5. 19application · easy

   A company hosts critical applications in a colocation facility. They want to extend Prisma Access to this facility to provide secure access to those applications for remote users. The facility already has a network connection to the internet. Which solution should they use?

   • AColo-Connect
   • BService connection
   • CZTNA Connector
   • DIPSec tunnel
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is configuring a service connection to a data center. They have two ISPs providing internet connectivity to the data center. They want to ensure that if one ISP fails, the service connection remains available. What is the best way to achieve this?

   • AConfigure a single service connection with a static route and rely on the ISP's redundancy.
   • BConfigure the service connection to use both ISPs in an active-active mode.
   • CConfigure two service connections, one over each ISP, and use BGP for failover.
   • DUse a ZTNA Connector to provide a backup path.
   Reveal Solution Discussion Select an answer first