1.1 Identify and Describe Prisma Access Architecture and Components SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A network administrator is reviewing the Prisma Access architecture and notices that different types of security processing nodes (SPNs) are used for different functions. Which statement accurately describes the role of SPN types in Prisma Access?

   • AAll SPNs perform the same inspection functions, and the type only affects capacity planning.
   • BSPN types are determined by the compute location and cannot be changed after deployment.
   • CSPN types are only relevant for DNS security and do not affect other security functions.
   • DDifferent SPN types handle different traffic types, such as mobile user traffic versus remote network traffic.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the role of a DNS proxy in Prisma Access?

   • ATo provide DNS resolution for internal resources
   • BTo forward DNS queries from users to the appropriate DNS server
   • CTo provide DNS resolution for the Prisma Access infrastructure
   • DTo block all DNS queries from remote users
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is using Prisma Access and has a mix of users who need access to internal DNS servers and others who should use external DNS. The security team wants to ensure that all DNS queries are inspected for threats. What is the most efficient way to achieve this?

   • ADisable DNS proxy and rely on the user's local DNS resolver.
   • BUse source NAT to translate DNS queries to a single IP and then inspect them.
   • CDeploy separate SPNs for internal and external DNS traffic.
   • DConfigure a DNS proxy that forwards queries to the appropriate DNS servers and enables DNS security.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   How does Prisma Access handle DNS resolution for internal resources?

   • AIt uses internal DNS services that are configured in Prisma Access
   • BIt uses the public DNS servers of the customer's ISP
   • CIt blocks all DNS queries for internal resources
   • DIt uses the DNS servers of the compute location
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   How are IP addresses allocated for remote users in Prisma Access?

   • AEach remote user is assigned a static IP address from the customer's on-premises pool
   • BRemote users are assigned IP addresses from the same pool as branch offices
   • CRemote users are dynamically assigned IP addresses from a pool managed by Prisma Access
   • DRemote users are assigned IP addresses based on their geographic location
   Reveal Solution Discussion Select an answer first