309 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
When configuring Prisma Access to inspect traffic between different branch offices (Branch-to-Branch traffic), where is the inspection typically performed?
Prisma Access performs security inspection of branch-to-branch traffic inside its Cloud Security Processing Node (SPN) infrastructure, because branch traffic is tunneled to the Prisma Access service and then re-inspected before being forwarded to the destination branch. This is t…Read full explanation
An enterprise is deploying Prisma Access to secure remote workers and branch offices. The security team needs to ensure that user identity from Microsoft Entra ID is correctly mapped to traffic logs without requiring users to authenticate through an explicit captive portal. Which component must be deployed?
The Cloud Identity Engine (CIE) agent synchronizes user and group information from directories such as Microsoft Entra ID into Prisma Access, enabling User-ID mapping to traffic logs without requiring users to authenticate through a captive portal. CIE is Palo Alto Networks' clou…Read full explanation
An organization is using Prisma Cloud to monitor AWS IAM policies. A custom policy check fails because an IAM role allows overly permissive actions on S3 buckets. Where in Prisma Cloud should the administrator navigate to view and remediate this specific cloud infrastructure misconfiguration?
Prisma Cloud CSPM (Cloud Security Posture Management) is the module that continuously evaluates cloud resource configurations against policies, and misconfigured IAM roles appear as Alerts there. Administrators can filter alerts by the AWS IAM service, use RQL to query the specif…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.