SSE-Engineer Prisma Access Troubleshooting Practice Question
An administrator is troubleshooting a Prisma Access Remote Network environment where BGP routes from the customer CPE are not being learned by Prisma Access. Which THREE configuration elements should be verified? (Choose three)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure the Autonomous System (AS) numbers match or are correctly configured for external/internal BGP peering.
BGP troubleshooting requires verifying peer IP addresses, AS numbers, authentication keys, and network prefix advertisements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Ensure the Autonomous System (AS) numbers match or are correctly configured for external/internal BGP peering.
Why this is correct
Mismatched AS numbers prevent BGP session establishment.
- ✓
Confirm that the CPE is actively advertising the correct IP prefixes to the Prisma Access BGP peer.
Why this is correct
If the CPE is not advertising prefixes, Prisma Access cannot learn the routes.
- ✗
Verify the WildFire cloud analysis subscription status.
Why it's wrong here
WildFire subscription status has no relation to BGP routing protocols.
- ✓
Verify that the BGP peer IP addresses configured on Prisma Access match the CPE peer addresses.
Why this is correct
Incorrect peer IP addresses prevent BGP TCP sessions from establishing.
- ✗
Check the GlobalProtect portal SSL certificate expiration date.
Why it's wrong here
GlobalProtect portal certificates affect mobile user HTTPS access, not BGP routing over site-to-site tunnels.
About these practice questions
One of 203 original SSE-Engineer practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This SSE-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSE-Engineer exam.