4.2 Manage and Operate Prisma Access with Strata Cloud Manager (SCM) SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When would an administrator use the rollback feature in Strata Cloud Manager?

   • AWhen Prisma Access experiences a hardware failure
   • BWhen a new user needs to be added to the tenant
   • CAfter a configuration change causes an unintended issue
   • DWhen traffic logs need to be archived
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security operations team is investigating a potential data exfiltration incident. They need to identify all outbound traffic from a specific user to a cloud storage service over the past 24 hours. The team also wants to understand the context of the traffic, such as the application used and the amount of data transferred. What should the team do in Strata Cloud Manager?

   • AUse Copilot to ask for a summary of the user's traffic.
   • BRun a predefined report on top users by bandwidth usage.
   • CUse the Traffic logs to filter by user, destination, and time range, and review the session details.
   • DUse the Threat logs to identify any malware signatures associated with the traffic.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator made a series of configuration changes over the past week, including new security policies, address objects, and a modification to a shared infrastructure rule. Today, a critical application stopped working. The administrator suspects one of the changes is responsible but is not sure which one. The administrator needs to restore service quickly while preserving the ability to identify the problematic change. What should the administrator do?

   • AReview the configuration version history to identify the exact change that affected the application, then manually revert that change.
   • BDisable the affected application's security policy and re-enable it later.
   • CUse Copilot to automatically revert the last change.
   • DRoll back to the configuration version from before the week's changes.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A managed security service provider (MSSP) is onboarding a new customer that requires Prisma Access. The customer has its own administrators who must manage their own security policies, but the MSSP needs to maintain overall control and visibility. The customer does not want to share administrative credentials with the MSSP. What should the MSSP do in Strata Cloud Manager?

   • AUse the same tenant but create a separate device group for the customer.
   • BShare the MSSP's superuser credentials with the customer's administrators.
   • CCreate a new tenant for the customer and invite the customer's administrators with appropriate RBAC roles.
   • DAdd the customer as a new administrator in the MSSP's existing tenant.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has a Prisma Access tenant with several administrators. The company wants to ensure that only senior security engineers can modify security policies, while junior administrators can only view configurations and run reports. What should the administrator configure in Strata Cloud Manager?

   • AUse the default superuser role for senior engineers and the default auditor role for junior administrators.
   • BCreate custom RBAC roles with specific permissions and assign them to the appropriate administrators.
   • CCreate a separate tenant for junior administrators with read-only access.
   • DGrant all administrators the same role and rely on change management processes.
   Reveal Solution Discussion Select an answer first