Unified SASE

A network administrator is configuring Prisma SD-WAN to integrate with Prisma Access using the Automated Service Connection. During the onboarding process, which specific parameter must be configured in the ION device's service route to ensure traffic is correctly steered to the Prisma Access Service Infrastructure?

You are deploying Cloud Identity Engine (CIE) to enable identity-based security policies across your SD-WAN and SASE environment. Which configuration step is required to ensure that user identity information is successfully propagated from the enterprise directory to the Prisma Access security nodes?

In a Unified SASE architecture, an administrator needs to ensure that branch offices prioritize voice traffic while using Prisma Access. Where should the Quality of Service (QoS) policy be defined to ensure consistent application performance?

A customer is experiencing intermittent connectivity to internal applications after enabling Unified SASE. Traffic is being routed through Prisma Access. What is the most likely cause?

An engineer is troubleshooting a scenario where users at a branch office cannot access SaaS applications via Prisma Access. The SD-WAN path is active, but the traffic is not reaching the Cloud SWG. What is the most likely cause related to the Unified SASE policy?

You are verifying the status of a Service Connection between a branch ION and Prisma Access. Which command or dashboard view provides the most accurate status of the tunnel reachability?

An organization is migrating to Unified SASE. When configuring the 'Direct to App' policy for branch offices, what is the primary benefit of leveraging the Prisma SD-WAN integration with Prisma Access?

What is the primary function of the 'Cloud Identity Engine' in the Unified SASE architecture?

Which component in the Unified SASE stack is responsible for enforcing URL filtering and threat prevention policies for remote users?

When defining an Application Steering Policy in a Unified SASE environment, what is the advantage of using 'Application Groups'?

In a scenario where a branch office loses its internet connection, what happens to the Unified SASE connection?

You are monitoring traffic in a Unified SASE environment. You notice that traffic from a branch is taking a non-optimal path to Prisma Access. Which tool would you use to verify the path selection logic?

Which protocol is primarily used for the tunnel between the ION device and the Prisma Access Service Infrastructure?

Which of the following is a benefit of a Unified SASE architecture?

In a Unified SASE deployment, what is the significance of the ION device serial number?

When troubleshooting a persistent 'Service Connection Down' status, which log type is most relevant?

An administrator wants to limit the bandwidth used by a specific application when routed to Prisma Access. Where is this configured?

If a user is incorrectly identified in a SASE security log, which part of the Unified SASE architecture should be investigated first?

What is the purpose of the 'Zone' configuration on an ION device in a Unified SASE context?

Which THREE factors influence the 'Path Selection' decision for traffic in a Unified SASE architecture?

An engineer notices that some traffic is not being optimized by the Prisma SD-WAN fabric. Upon inspection, the traffic is bypassing the SD-WAN tunnels. What is the most likely cause?

How are security logs from Prisma Access and Prisma SD-WAN correlated in a Unified SASE environment?

Which component manages the configuration and policy definition for a fleet of Prisma SD-WAN ION devices?

Which TWO of the following are required to successfully establish a Service Connection to Prisma Access?

Which TWO functions are performed by the Cloud Identity Engine (CIE) within a Unified SASE environment?

Which TWO types of traffic are typically steered to Prisma Access in a Unified SASE architecture?

Which TWO benefits does an automated Service Connection provide over a manual tunnel configuration?

Which TWO visibility tools help monitor the Unified SASE traffic flow?

Which THREE components are involved in the process of applying a user-based policy in a Unified SASE architecture?

Which THREE parameters are essential when troubleshooting a Service Connection tunnel status?

Which THREE items must be configured to ensure that traffic is correctly routed through a Service Connection for security inspection?

Which THREE factors must be considered when designing a high-availability (HA) Service Connection to Prisma Access?

Which THREE items are required to successfully deploy a new branch ION device with zero-touch provisioning for a Unified SASE environment?

Which TWO actions can be performed by the SD-WAN controller to manage SASE security policy?

A network engineer is deploying a new branch office with a Prisma SD-WAN ION device. The security team requires that all internet-bound traffic from the branch be inspected by Prisma Access Cloud SWG, while traffic to internal SaaS applications should use direct internet breakouts. The engineer must configure the ION to steer traffic appropriately. Which action should the engineer take to meet these requirements?

A network administrator is deploying a new branch with a Prisma SD-WAN ION device and wants to leverage Unified SASE for security inspection. The administrator has already configured the Service Connection to Prisma Access. Which additional step is required to ensure that traffic from the branch is inspected by Prisma Access?

A network engineer is deploying a Unified SASE solution with Prisma SD-WAN and Prisma Access. The engineer wants to ensure that traffic from a specific branch is inspected by Prisma Access, but traffic to a critical internal application must bypass Prisma Access and go directly over the Prisma SD-WAN fabric. The branch has two ION devices for redundancy. Which configuration should the engineer use to achieve this?

A security administrator is troubleshooting a Unified SASE deployment where branch users cannot access a critical internal application hosted in an on-premises data center. The application is reachable from other sites, but branch traffic destined to the application's IP is being routed to Prisma Access instead of the data center. The ION device has a Service Connection configured to Prisma Access and a VPN connection to the data center. What is the most likely cause of this issue?

A security architect is designing a Unified SASE deployment where branch users must access both SaaS applications and internal data center resources. The requirement is that SaaS traffic be inspected by Prisma Access while internal traffic goes directly over the SD-WAN fabric without backhauling to the cloud. Which Prisma SD-WAN feature should be used to enforce this traffic separation?

A network engineer has just deployed a new ION device at a branch office. The device has successfully established its control plane connection to the Prisma SD-WAN controller. The engineer now wants to enable secure web gateway (SWG) inspection for all internet-bound traffic from this branch without manually creating tunnels. Which Prisma SD-WAN feature should the engineer configure?

A network engineer is deploying a Unified SASE solution with Prisma SD-WAN and Prisma Access. The engineer needs to ensure that branch traffic destined for the internet is inspected by Prisma Access cloud security services, while traffic to internal data center applications goes directly over the SD-WAN fabric without inspection. Which configuration on the ION device accomplishes this?

An administrator is configuring a Unified SASE deployment with Prisma SD-WAN and Prisma Access. The administrator wants to verify that the service connection between the branch ION device and Prisma Access is operational and that traffic is being inspected. Which Prisma SD-WAN dashboard view should the administrator use to see the status of the service connection and the amount of traffic being sent to Prisma Access?

A network engineer is troubleshooting a Unified SASE deployment where branch users report slow access to Microsoft 365. The engineer suspects that traffic is being backhauled to a data center for security inspection instead of being sent directly to Prisma Access. The ION device has a Service Connection configured and active. Which action should the engineer take to ensure that Microsoft 365 traffic is inspected by Prisma Access while other traffic follows the default route?

A network security administrator is configuring Prisma Access to integrate with Prisma SD-WAN for Unified SASE. The administrator needs to ensure that security logs from Prisma Access can be correlated with traffic logs from Prisma SD-WAN to troubleshoot an incident. Which configuration is required to enable this correlation?

A security administrator is troubleshooting a Unified SASE deployment where branch users cannot access a cloud-based CRM application. The traffic is being steered to Prisma Access for inspection, but users report timeouts. The administrator checks the ION device and sees that the service connection to Prisma Access is up, and the CRM application is allowed in the security policy. What is the most likely cause of the issue?

A network architect is designing a Unified SASE solution for a company with multiple branches. The company wants to ensure that all internet-bound traffic from branches is inspected by Cloud SWG, while traffic to internal applications is routed through a data center. The architect plans to use Prisma SD-WAN with Service Connections to Prisma Access. Which configuration approach should the architect recommend to meet these requirements?

A company is deploying Unified SASE with Prisma SD-WAN and Prisma Access. The security team wants to ensure that traffic from branch ION devices is inspected by Prisma Access and that security logs from both products are correlated for unified reporting. Which TWO actions are required to achieve this integration? (Choose two.)

A security architect is designing a Unified SASE deployment for a retail chain with 200 branch sites. The company wants to enforce consistent security policies for both internet-bound and private application traffic, while minimizing the number of separate management consoles. Which architectural component of Unified SASE directly provides this consolidation?

A network engineer is configuring a Unified SASE solution with Prisma SD-WAN and Prisma Access. The engineer wants to ensure that traffic from a specific branch is inspected by Prisma Access, but also wants to avoid sending traffic to Prisma Access for destinations that are reachable via a direct SD-WAN path to the data center. Which Prisma SD-WAN feature allows the engineer to define which traffic should be sent to Prisma Access?

A network engineer is troubleshooting a Unified SASE deployment where branch users report that access to internal applications is slow after enabling Prisma Access inspection. The engineer confirms that internal traffic is being sent to Prisma Access instead of directly over the SD-WAN fabric. Which configuration change should the engineer make to resolve the issue?

A network administrator is configuring a Service Connection between a branch ION device and Prisma Access. The administrator wants to ensure that all traffic from the branch to the internet is inspected by the cloud SWG, while traffic to private applications goes directly over the VPN. Which configuration element on the ION device is used to define which traffic is sent to the Service Connection?

An administrator is deploying Prisma SD-WAN with Unified SASE. The administrator needs to ensure that the ION device can establish a service connection to Prisma Access. Which of the following must be configured on the ION device to allow the service connection to be established?

A network engineer is deploying a new branch office with a Prisma SD-WAN ION device. The branch requires direct internet access for guest users, but corporate traffic must be inspected by Prisma Access. The engineer wants to minimize configuration overhead and ensure that only corporate traffic is redirected to Prisma Access while guest traffic goes directly to the internet. Which feature should the engineer configure on the ION device to achieve this?

A network administrator is designing a Unified SASE solution for a retail company with many small branches. The company wants to reduce the complexity of managing separate security and networking policies. Which primary benefit of Unified SASE should the administrator highlight to the management team?

A network engineer is deploying a new branch office with a Prisma SD-WAN ION device that will connect to Prisma Access for Unified SASE. The engineer needs to configure the ION device to establish a secure tunnel to the Prisma Access service infrastructure. Which protocol is used for this tunnel?

A network engineer is troubleshooting a Unified SASE deployment where a branch ION device has established a control connection to Prisma Access, but application traffic from the branch is not being inspected by Prisma Access security services. The engineer confirms that the ION device is online and the service connection is active. Which configuration element should the engineer verify to ensure that traffic is steered to Prisma Access for inspection?

A network engineer is troubleshooting a Unified SASE deployment. Branch users report that HTTPS traffic to a business-critical SaaS application is intermittently failing. The engineer suspects that the traffic is not being steered to Prisma Access for security inspection. Which action should the engineer take first to verify the traffic steering policy?

A security architect is designing a Unified SASE solution with Prisma SD-WAN and Prisma Access. The company requires that all traffic from branch ION devices to the internet be inspected by Prisma Access, but they also want to optimize performance for Microsoft 365 traffic by using local internet breakout. Which Prisma SD-WAN feature should the architect use to achieve this?

A network engineer is deploying Prisma SD-WAN with Unified SASE and wants to ensure that branch traffic destined for the internet is inspected by Prisma Access. The engineer has already configured the service connection on the ION device. Which additional configuration is required on the ION device to direct internet-bound traffic to Prisma Access?

A network engineer is configuring a Unified SASE deployment with Prisma SD-WAN and Prisma Access. The engineer needs to ensure that user traffic from branch offices is securely forwarded to Prisma Access for inspection. Which TWO components are required to establish this secure forwarding? (Choose two.)