4.1 Manage and Operate Prisma Access with Panorama SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What should be checked before upgrading Panorama to ensure compatibility with Prisma Access?

   • AThe current weather in the data center.
   • BThe number of active users in Prisma Access.
   • CThe compatibility matrix for Panorama and Prisma Access versions.
   • DThe amount of free disk space on the Panorama server.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses Panorama to manage Prisma Access and wants to integrate with their existing identity provider (IdP) for administrator authentication. They require that administrators use multi-factor authentication (MFA) and that access to different tenants is based on group membership in the IdP. What should be configured in Panorama?

   • AConfigure SAML authentication for Panorama administrators and map IdP groups to RBAC roles scoped to tenants.
   • BConfigure local administrator accounts with strong passwords and enable MFA on each account.
   • CConfigure LDAP authentication and manually assign roles to each administrator.
   • DUse RADIUS authentication with a shared secret and assign the same role to all administrators.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator recently made a change to a Prisma Access security policy via Panorama. After the change, users report connectivity issues. The administrator needs to revert to the previous configuration quickly. What should the administrator do?

   • AManually undo the change by editing the policy back to its original settings.
   • BRestart the Panorama management server to clear the change.
   • CUse Panorama's configuration versioning to load the previous configuration version and commit it.
   • DUse the audit log to identify the change and then manually reverse it.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization uses Panorama to manage Prisma Access. The firewall administrators need to modify security policies and objects, but they should not be able to change administrative accounts or authentication settings. Which RBAC role should be assigned to these administrators?

   • ARead-only administrator
   • BDevice administrator
   • CCustom role with read-write access to security policies and objects, but read-only or no access to administrator and authentication settings
   • DPanorama administrator
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   After upgrading Prisma Access, an administrator wants to verify that the upgrade was successful and that the service is operating correctly. Which action should the administrator take as part of post-upgrade validation?

   • ARun a traffic test from a user device to confirm connectivity.
   • BCheck the Panorama system logs for upgrade-related errors and confirm that Prisma Access shows the new version.
   • CReview the configuration audit log to see if any changes were made during the upgrade.
   • DReboot Panorama to ensure the new version is loaded.
   Reveal Solution Discussion Select an answer first