1.1 Identify and Describe Prisma Access Architecture and Components SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security administrator is troubleshooting a situation where users can resolve internal hostnames but are not protected from DNS-based malware. They have configured a DNS proxy. What is the most likely reason DNS security is not blocking malicious domains?

   • AThe compute location is not set to the region where the users are located.
   • BThe SPN type is not appropriate for DNS inspection.
   • CThe DNS proxy is not configured to forward queries to the internal DNS server.
   • DDNS security is not enabled on the DNS proxy or the threat intelligence feed is not updated.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company is deploying Prisma Access for remote users and branch offices. They have overlapping IP addresses between the two groups. The branch office uses 10.0.0.0/8, and remote users also use 10.0.0.0/8. How does Prisma Access prevent routing conflicts?

   • APrisma Access performs source NAT for both mobile users and remote networks, translating their source IPs to unique addresses.
   • BPrisma Access assigns different compute locations to each group to avoid conflicts.
   • CPrisma Access uses destination NAT to translate the destination IPs to unique addresses.
   • DPrisma Access uses DNS proxy to resolve the overlapping IPs to different hostnames.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement accurately describes how security processing nodes (SPNs) handle traffic in Prisma Access?

   • ASPNs forward traffic to a central data center for all security inspection
   • BSPNs perform security inspection and then forward traffic to its destination
   • CSPNs only handle traffic from remote users, not from branch offices
   • DSPNs only inspect traffic that is destined for the internet, not traffic between internal sites
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a compute location in Prisma Access?

   • AA data center where customer logs are stored
   • BA virtual network where customers deploy their own firewalls
   • CA location where customers can host their applications
   • DA geographic region where Prisma Access security processing nodes are deployed
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the function of a Branch SPN in Prisma Access?

   • ATo provide security inspection for traffic originating from branch office locations
   • BTo manage the IPsec tunnels for all remote users
   • CTo provide DNS security for all Prisma Access users
   • DTo store security logs for branch office traffic
   Reveal Solution Discussion Select an answer first