SSE-Engineer Prisma Access Troubleshooting Practice Question
A Prisma Access deployment has multiple Remote Networks and Mobile Users. An administrator implements Quality of Service (QoS) to prioritize VoIP traffic over bulk file transfers. After applying the QoS profile, VoIP performance does not improve. What should the administrator verify first in the Prisma Access QoS configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that the QoS profile is applied to the correct security policy rules and that the guaranteed bandwidth settings align with the provisioned Prisma Access node bandwidth limits.
Prisma Access QoS relies on correct classification of traffic via security policies and proper bandwidth allocation profiles matching the provisioned bandwidth of the egress node.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Verify the BGP AS number on the customer CPE.
Why it's wrong here
BGP AS numbers establish routing adjacencies, not QoS queue management.
- ✗
Check the expiration date of the GlobalProtect gateway SSL certificate.
Why it's wrong here
SSL certificates govern encryption trust, not traffic prioritization.
- ✓
Verify that the QoS profile is applied to the correct security policy rules and that the guaranteed bandwidth settings align with the provisioned Prisma Access node bandwidth limits.
Why this is correct
If QoS classes are not referenced in security rules or if bandwidth allocations exceed provisioned node limits, QoS prioritization will not take effect.
- ✗
Ensure that GlobalProtect pre-logon mode is disabled.
Why it's wrong here
Pre-logon mode is used for pre-Windows login authentication and does not affect QoS prioritization.
About these practice questions
One of 203 original SSE-Engineer practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This SSE-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSE-Engineer exam.