4.4 Maintain Security Posture in Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which practice is essential for maintaining compliance in Prisma Access over time?

   • ADisabling logging to reduce storage costs
   • BUsing the same security policies for all users regardless of role
   • CAvoiding configuration changes to prevent non-compliance
   • DPerforming regular BPA assessments and reviewing findings
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security operations center (SOC) manager needs to provide a monthly summary to the board of directors showing the organization's compliance status with internal security policies as enforced by Prisma Access. What is the most efficient way to produce this recurring summary?

   • ARun a Best Practice Assessment each month and present the raw report to the board.
   • BManually compile the summary by reviewing the Prisma Access dashboard each month.
   • CCreate a scheduled compliance report in Prisma Access that runs monthly and email it to the board.
   • DAsk the Prisma Access vendor to provide a monthly compliance report.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of generating compliance reports in Prisma Access?

   • ATo provide evidence of compliance for audits and stakeholders
   • BTo increase network bandwidth
   • CTo automatically remediate non-compliant configurations
   • DTo replace the need for security monitoring
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A network administrator has just finished configuring a new Prisma Access tenant and wants to run a Best Practice Assessment to ensure the initial setup is sound. Where should the administrator go to initiate this assessment?

   • ASubmit a request to Palo Alto Networks support to run the assessment.
   • BRun the BPA command from the Panorama CLI.
   • CDownload the BPA tool from the Palo Alto Networks website and install it on a local server.
   • DNavigate to the Prisma Access console and select the Best Practice Assessment option from the Tools or Assessments menu.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   After running a Best Practice Assessment, a security analyst reviews the report and sees that several security policy rules are flagged as 'non-compliant' because they are configured with a 'any' service and a 'any' application. The analyst also notices a separate finding about a lack of vulnerability protection profiles on some rules. What is the most appropriate first step to address these findings?

   • AReview the flagged rules and identify which ones can be tightened to specify the exact applications and services, then apply the appropriate security profiles.
   • BDelete all flagged rules and recreate them from scratch using the default template.
   • CImmediately change all flagged rules to use 'any' for applications and services to ensure no traffic is blocked.
   • DDisable the BPA check for these rules to prevent them from being flagged in future reports.
   Reveal Solution Discussion Select an answer first