SSE-Engineer Practice Test 10 — 10 Questions

Question 1

Which TWO configuration steps are required to allow internet access for Remote Network users?

Accepted Answer

Enable Internet Access in the Remote Network configuration.. To allow internet access, the remote network needs to be configured and a security policy must permit the traffic from the remote network zone to the internet zone.

Answer

Install a local proxy server.

Answer

Assign a static IP address to every mobile device.

Answer

Configure an IPSec tunnel to a third-party ISP.

Question 2

During the initial deployment of Prisma Access for remote networks, an administrator needs to define the bandwidth allocation for a specific compute location. Which tool is used to manage and push this bandwidth allocation?

Accepted Answer

Panorama. Panorama is the centralized management tool used to configure and push Prisma Access settings, including bandwidth allocation for remote networks and mobile users.

Answer

Prisma SD-WAN Cloud Controller

Answer

Prisma Access Plugin for AWS Console

Answer

GlobalProtect Portal standalone web GUI

Question 3

An administrator is configuring Prisma Access Secure Web Gateway and wants to restrict access to high-risk web categories. Which TWO options represent configurable actions within a Prisma Access URL Filtering profile? (Choose two)

Accepted Answer

Continue. URL Filtering profiles support multiple actions per category, including Allow, Block, Alert, Continue, and Override.

Answer

Decrypt

Answer

Sandbox

Answer

Quarantine

Question 4

An administrator is troubleshooting a connectivity issue where remote mobile users cannot reach internal private applications via Prisma Access ZTNA. Which THREE diagnostic steps or verification checks should the administrator perform? (Choose three)

Accepted Answer

Verify that the GlobalProtect app on the user endpoint has successfully established a secure tunnel and updated its Host Information Profile (HIP). Troubleshooting Prisma Access ZTNA connectivity involves verifying the GlobalProtect connection status and HIP report, ensuring the Prisma Access App Connector is online and reachable, and checking the Security Policy rules for App-ID blocks.

Answer

Reboot the physical public cloud provider datacenter hypervisor hosting the tenant

Answer

Reconfigure the local ISP router's BGP autonomous system number to match the Prisma Access gateway

Question 5

An architect is designing a Prisma Access deployment for a global enterprise that requires low-latency connectivity for remote workers across North America, Europe, and Asia. Which component should the architect deploy to ensure traffic processing occurs closest to the user's geographical location?

Accepted Answer

Multiple Security Processing Nodes (SPNs) distributed across multiple geographic regions. Remote Networks and Mobile Users require Security Processing Nodes (SPNs) deployed across multiple compute locations globally to ensure traffic is processed closest to the user, minimizing latency.

Answer

A dedicated hardware Panorama appliance in each branch office

Answer

Prisma SD-WAN appliances at every remote user laptop

Answer

A single centralized Prisma Access parent node in the headquarters region

Question 6

An enterprise wants to ensure that all internet-bound traffic from mobile users is decrypted and inspected for malware and sensitive data using Prisma Access SWG. Which GlobalProtect client traffic forwarding configuration ensures that all traffic is sent to Prisma Access?

Accepted Answer

Tunnel All Traffic mode. Tunnel all traffic mode routes all client traffic through the secure GlobalProtect tunnel to Prisma Access.

Answer

Explicit Proxy local bypass mode

Answer

Split Tunnel mode based on destination subnets

Answer

Client-less Portal mode

Question 7

An administrator configuring Prisma Access ZTNA wants to view real-time metrics regarding active mobile user connections, bandwidth consumption per region, and tunnel status. Which tool provides this specific operational dashboard?

Accepted Answer

Prisma Access Insights. Prisma Access Insights provides operational dashboards for bandwidth, active users, and tenant health.

Answer

Panorama Traffic Logs

Answer

Command Line Interface (CLI) via SSH to Prisma Access nodes

Answer

Prisma Cloud Compute console

Question 8

Which log type in Prisma Access should an administrator examine to review details about blocked URLs, category ratings, and user web-browsing attempts?

Accepted Answer

URL Filtering log. URL Filtering logs record all web traffic processed by SWG URL filtering rules.

Answer

Threat log

Answer

Data Filtering log

Answer

HIP Match log

Question 9

An administrator needs to configure Prisma Access Remote Networks to route specific corporate traffic to a local data center while sending internet-bound traffic directly through Prisma Access. Which configuration component in Panorama is used to define this split-tunneling behavior?

Accepted Answer

Subnets included in the Remote Network definition. In Prisma Access Remote Networks, split tunneling is controlled via the Traffic Distribution profile or explicit static routes configured under Network Services -> Prisma Access -> Remote Networks.

Answer

Traffic Distribution profile

Answer

GlobalProtect Client-less VPN portal settings

Answer

Decryption Policy rules

Question 10

An administrator needs to configure Prisma Access ZTNA to verify endpoint hygiene before granting access to internal applications. Which TWO posture checks can be evaluated using GlobalProtect Host Information Profiles (HIP)? (Choose two)

Accepted Answer

Antivirus presence and definition update status. HIP profiles evaluate endpoint security parameters including disk encryption status, antivirus installation, OS patch levels, and software inventory.

Answer

Active Directory group membership hierarchy

Answer

BGP route advertisement metrics

Answer

SAML Identity Provider multi-factor authentication token validity