5.2 Troubleshoot Prisma Access Traffic Enforcement Issues SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A split tunneling configuration is causing DNS queries to be sent to the local network instead of the corporate DNS server. What is the most likely cause?

   • AThe firewall's data plane is not processing DNS traffic.
   • BThe security policy is blocking DNS traffic.
   • CThe split tunneling policy does not include the corporate DNS server's IP address as a tunneled route.
   • DThe user's device is not configured with a DNS server.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A security administrator notices that traffic from a user is being associated with a different user in the firewall logs. What is the most likely cause of this User-ID mismatch?

   • AStale User-ID mappings in the firewall's user cache.
   • BThe firewall's data plane is not processing User-ID.
   • CThe firewall's management plane is overloaded.
   • DThe security policy is using the wrong source zone.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A security administrator is troubleshooting a security policy that is not matching traffic as expected. The policy is configured to allow web-browsing traffic, but the traffic is being denied. Which factor is most likely to cause this issue?

   • AThe firewall's management interface is not configured with an IP address.
   • BThe security policy is placed in a shared rulebase instead of the device group rulebase.
   • CThe firewall's clock is not synchronized with the management server.
   • DThe application identification engine has classified the traffic as a different application.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A User-ID policy is not matching the correct user. The administrator suspects a group mapping error. What should the administrator verify?

   • AThe firewall's logging is set to the 'information' level.
   • BThe security policy is using the correct application.
   • CThe firewall's routing table includes a route to the user's subnet.
   • DThe user is a member of the correct group in the directory service.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A user reports that internet traffic is not being routed through the VPN tunnel as expected. The split tunneling configuration appears correct. What is the most likely cause?

   • AThe security policy is blocking the tunnel traffic.
   • BThe user's device is not connected to the internet.
   • CThe client is not receiving the correct routing table from the gateway.
   • DThe firewall's data plane is not processing split tunneling.
   Reveal Solution Discussion Select an answer first