4.1 Manage and Operate Prisma Access with Panorama SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A global enterprise is deploying Prisma Access and will use Panorama to manage multiple tenants, one per business unit. The network team must be able to manage all tenants, but the security operations center (SOC) should only have read-only access to traffic logs across all tenants. Which Panorama configuration approach satisfies these requirements while maintaining tenant isolation?

   • AUse a single tenant but create separate administrators with different roles for each business unit.
   • BCreate a separate template for each business unit and assign the SOC a role with log access to those templates.
   • CCreate a single device group for all tenants and assign the SOC a role with log access to that device group.
   • DCreate a separate tenant for each business unit, assign the network team a role with access to all tenants, and assign the SOC a read-only role scoped to all tenants.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   An organization is planning to upgrade Panorama and Prisma Access to a new software version. They have a maintenance window of 4 hours. The upgrade must be completed within this window, and they need to be able to roll back if issues arise. What should be done to minimize risk and meet the time constraint?

   • AUpgrade Panorama first, then upgrade Prisma Access, and take a configuration backup before starting.
   • BUpgrade both simultaneously to save time, and skip the backup to meet the window.
   • CUpgrade Panorama only and leave Prisma Access on the current version.
   • DUpgrade Prisma Access first, then upgrade Panorama, and rely on the previous version's compatibility.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security analyst needs to generate a report of all traffic denied by a specific security rule in the last week. They want to use Panorama's reporting capabilities. What should they do?

   • AUse the ACC to view the top denied traffic.
   • BExport the configuration to see the rule's settings.
   • CCreate a custom report in the report management feature.
   • DUse the log viewer to query traffic logs with a filter for the rule and action 'deny'.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What type of log would you query to investigate a security threat detected by Prisma Access?

   • AThreat log
   • BConfiguration log
   • CSystem log
   • DTraffic log
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is the purpose of authorization policies for administrators in Panorama?

   • ATo define the network routes for administrator traffic.
   • BTo define the encryption algorithms used for administrator sessions.
   • CTo define which administrators can access which tenants and what actions they can perform.
   • DTo define which end users can access Prisma Access services.
   Reveal Solution Discussion Select an answer first