5.2 Troubleshoot Prisma Access Traffic Enforcement Issues SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–7

1. 6foundation · easy

   A user's device is not matching the expected HIP-based policy. The HIP profile and object appear correct. What should the administrator check next?

   • AThe security policy is using the correct source zone.
   • BThe client's posture information is up to date and being reported to the firewall.
   • CThe firewall's routing table includes a route to the client's local subnet.
   • DThe firewall's logging is set to the 'information' level.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A security administrator notices that traffic that should be allowed by a security policy is being denied. Which initial step should the administrator take to determine whether the issue is caused by rule ordering?

   • AReview the firewall's traffic logs to see which rule matched the traffic.
   • BDisable the application identification feature to bypass policy checks.
   • CDelete all security policies and recreate them in a different order.
   • DReboot the firewall to reset the rule evaluation order.
   Reveal Solution Discussion Select an answer first