4.2 Manage and Operate Prisma Access with Strata Cloud Manager (SCM) SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a required configuration step when creating a new tenant in Strata Cloud Manager?

   • AConfiguring a site-to-site VPN to the cloud service
   • BDeploying a virtual firewall in each compute location
   • CAssigning a tenant name and selecting a service plan
   • DCreating a local user account for every remote user
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of version control in Strata Cloud Manager?

   • ATo automatically update Prisma Access software
   • BTo manage user passwords and authentication
   • CTo provide real-time traffic monitoring
   • DTo track configuration changes and allow rollback to previous versions
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How can Copilot assist an administrator who is troubleshooting a connectivity issue?

   • ABy providing guided steps and relevant log analysis
   • BBy automatically changing firewall rules
   • CBy rebooting Prisma Access infrastructure
   • DBy creating a support ticket without user input
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In Strata Cloud Manager, where can an administrator view security logs for Prisma Access?

   • AThe Settings section
   • BThe Manage section
   • CThe Monitor section
   • DThe Workflows section
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A multinational company is deploying Prisma Access for its global workforce. The company has regional security teams that need to manage their own policies, but the central team must enforce a common security baseline. Additionally, the company wants to ensure that regional teams cannot modify the baseline policies. What should the administrator configure in Strata Cloud Manager?

   • AUse a single tenant and create a separate administrator role for each region without scoping.
   • BCreate a separate tenant for each region and use shared templates for the baseline.
   • CGrant all regional teams superuser access and rely on them to follow the baseline.
   • DCreate a single tenant with device groups for each region and use administrative scopes to restrict regional teams to their device groups.
   Reveal Solution Discussion Select an answer first