4.4 Maintain Security Posture in Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has just remediated all findings from its latest Best Practice Assessment. To ensure the security posture remains strong, the security team wants to establish an ongoing practice that will catch new misconfigurations as changes are made. What should they implement?

   • ARely on the firewall logs to identify any configuration drift.
   • BSchedule a recurring Best Practice Assessment to run at regular intervals and review the findings.
   • COnly run the Best Practice Assessment when a major change is planned.
   • DDisable the Best Practice Assessment now that all findings are resolved.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which Prisma Access feature is used to monitor compliance status against a specific framework?

   • ACompliance Dashboard
   • BThreat Prevention
   • CUser-ID
   • DData Loss Prevention
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security analyst is reviewing a Best Practice Assessment report and notices that a finding is marked as 'high' severity. The finding states that 'WildFire analysis is not enabled for all outbound traffic.' The analyst needs to understand the impact of this finding and decide on the next step. What is the most important consideration when interpreting this finding?

   • AThe finding can be ignored because WildFire is enabled by default on all Prisma Access tenants.
   • BThe finding requires immediate action to disable WildFire to improve performance.
   • CThe finding indicates a potential security gap where unknown files may not be analyzed for malware before reaching users.
   • DThe finding is a false positive because WildFire is only needed for inbound traffic.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security engineer is troubleshooting a Best Practice Assessment that is failing to complete. The engineer has verified that the Prisma Access tenant is healthy and that the administrator account has the required permissions. What is the most likely cause of the BPA failure, and what should the engineer do next?

   • AThe BPA requires a specific license that the tenant does not have; the engineer should purchase a new license.
   • BThe BPA service may be temporarily unavailable; the engineer should wait and retry the assessment.
   • CThe BPA is failing because the configuration is too complex; the engineer should simplify the configuration.
   • DThe BPA can only be run once per day; the engineer should wait until the next day.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the first step an administrator should take before running a Best Practice Assessment in Prisma Access?

   • AEnsure the configuration is saved and committed
   • BExport the configuration to a local file for backup
   • CContact Palo Alto Networks support for approval
   • DDisable all security policies to avoid false positives
   Reveal Solution Discussion Select an answer first