4.4 Maintain Security Posture in Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A Best Practice Assessment report for a Prisma Access deployment shows a critical finding: 'URL Filtering profile is not applied to the security policy rule that handles outbound internet traffic for the marketing department.' The administrator needs to remediate this finding with minimal impact on the marketing team's current workflow. What should the administrator do?

   • AEdit the specific security policy rule and attach the recommended URL Filtering profile to it.
   • BDisable the URL Filtering check in the BPA report to clear the finding.
   • CCreate a new, broader security policy rule above the existing one that applies URL Filtering to all traffic.
   • DApply the URL Filtering profile to the zone or interface instead of the security policy rule.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following best describes the scope of the Best Practice Assessment in Prisma Access?

   • AIt monitors user behavior for insider threats
   • BIt reviews the configuration of the Prisma Access tenant against best practices
   • CIt analyzes network traffic patterns to detect anomalies
   • DIt evaluates only security policy rules and excludes other configuration areas
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common compliance framework that Prisma Access can help organizations meet?

   • AISO 27001
   • BCOBIT
   • CITIL
   • DTOGAF
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security engineer is preparing for an annual PCI DSS audit. The CISO wants to proactively identify configuration gaps in the Prisma Access deployment before the external assessor arrives. The engineer has already reviewed the current security policies and routing tables manually. What should the engineer do next to systematically uncover misconfigurations against Palo Alto Networks' recommended settings?

   • AEnable the compliance monitoring feature in the Prisma Access console and wait for the next scheduled report.
   • BReview the firewall logs for the last 30 days to identify any blocked traffic that might indicate a security gap.
   • CExport the configuration to a text file and manually compare it against the PCI DSS requirements document.
   • DRun the Best Practice Assessment (BPA) from the Prisma Access console and review the generated report for non-compliant settings.
   Reveal Solution Discussion Select an answer first
6. 10application · medium · select all that apply

   A financial services company is subject to both the Payment Card Industry Data Security Standard (PCI DSS) and the Sarbanes-Oxley Act (SOX). The security team is evaluating how to use Prisma Access to support compliance with these frameworks. Which of the following are valid ways to use Prisma Access features for compliance management? (Select all that apply.)

   • ARely solely on Prisma Access to automatically ensure full compliance with all SOX requirements.
   • BUse the Best Practice Assessment to identify configuration gaps that could impact security controls required by PCI DSS.
   • CConfigure Prisma Access to log all relevant security events for the retention period required by the compliance frameworks.
   • DUse Prisma Access to enforce data loss prevention (DLP) policies that help protect cardholder data.
   • EGenerate compliance reports from Prisma Access to provide evidence of security configurations for auditors.
   Check answers Discussion Select an answer first