5.1 Monitor and Troubleshoot Prisma Access Connectivity SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is experiencing increased latency for mobile users accessing cloud applications through Prisma Access. The administrator wants to determine if the latency is caused by the Prisma Access infrastructure or by the user's local ISP. Which monitoring approach would provide the most useful data to isolate the issue?

   • ACheck the System logs for any errors related to the Prisma Access infrastructure in the user's region.
   • BReview the Traffic logs for the user's sessions to see if any are being dropped or denied.
   • CCompare the latency metrics from the Prisma Access monitoring dashboard with latency measurements taken from the user's device to the nearest Prisma Access entry point.
   • DReview the Configuration Audit log to see if any recent changes could have introduced latency.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Prisma Access feature connects to cloud and data center resources and can be monitored for operational status and throughput?

   • ARemote networks
   • BMobile users
   • CZTNA connectors
   • DService connections
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When a service connection is down, which protocol status should be checked to verify routing between Prisma Access and the cloud provider?

   • ADHCP lease status
   • BBGP peering status
   • CDNS resolution status
   • DIKE phase 1 status
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A user reports that they cannot access an internal application through ZTNA, but other users in the same office can access it. The ZTNA connector shows 'Connected' in the console. The administrator checks the connector's logs and sees that the user's authentication request is being rejected. Which of the following is the MOST likely cause of this issue?

   • AThe user's identity is not mapped to the correct group in the identity provider, so the ZTNA policy denies access.
   • BThe user's device is not compliant with the connector's security posture requirements.
   • CThe connector's application access policy is misconfigured, blocking the specific application for all users.
   • DThe connector's certificate has expired, causing authentication to fail for all users.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which log type would you examine to diagnose a service connection failure?

   • AConfiguration logs
   • BSystem logs
   • CTraffic logs
   • DAuthentication logs
   Reveal Solution Discussion Select an answer first