1.1 Identify and Describe Prisma Access Architecture and Components SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization is planning its Prisma Access deployment and needs to understand how IP addresses are allocated for remote network sites. Which statement is true regarding IP address allocation for sites in Prisma Access?

   • AEach site is assigned a static public IP address that must be manually configured on the firewall.
   • BSites must use the same IP address as the compute location to ensure proper routing.
   • CIP addresses are allocated based on the user's DNS proxy settings.
   • DIP addresses for sites are allocated from a pool and can change, so sites should use FQDNs for connectivity.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A network administrator is configuring a remote network site in Prisma Access. The site's public IP address is dynamic and changes frequently. What is the best practice for configuring the site's connection to Prisma Access?

   • AUse a fully qualified domain name (FQDN) for the site's connection so that DNS resolves the current IP.
   • BConfigure a DNS proxy to resolve the site's IP address.
   • CUse source NAT to translate the site's IP to a stable address.
   • DRequest a static IP address from Prisma Access for the site.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does Prisma Access handle source NAT for traffic from remote users?

   • AIt requires the user to configure source NAT on their device
   • BIt uses the user's public IP address as the source for all traffic
   • CIt performs source NAT using IP addresses from the Prisma Access address pool
   • DIt preserves the original source IP address of the remote user
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security administrator is configuring Prisma Access to protect users from DNS-based threats such as malware domains. Which feature should they enable to block malicious DNS queries?

   • ASource NAT to hide the user's IP from DNS servers
   • BCompute location selection to route DNS queries to a secure region
   • CDNS security with threat intelligence feeds
   • DSPN type selection to use a dedicated DNS inspection node
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is deploying Prisma Access and wants to ensure that users in a specific region are served by the nearest compute location. Which configuration is necessary?

   • AEnable the compute location for that region and ensure users are assigned to it.
   • BUse a single compute location for all users to simplify management.
   • CAssign static IP addresses to users in that region to ensure local routing.
   • DConfigure a custom DNS proxy for that region to route users to the nearest location.
   Reveal Solution Discussion Select an answer first