Prisma Access Planning And Deployment

A security engineer is deploying Prisma Access for mobile users and needs to ensure that all traffic from the GlobalProtect app is inspected by the security processing nodes, including traffic destined for the internet. Which setting must be configured in the Prisma Access mobile user configuration?

A network architect is designing a Prisma Access deployment for a company with multiple remote networks. The company requires that traffic from remote networks to the internet be inspected by Prisma Access, but they also want to minimize latency for cloud applications. Which feature should be enabled to optimize routing for cloud applications?

An administrator is planning a Prisma Access deployment for a small company with 10 remote users. The company does not have any data centers or branch offices. The administrator wants to ensure that the remote users are protected by Prisma Access security policies. What is the minimum configuration required?

Which administrative role or tool is primarily used to monitor the status, health, and aggregate traffic statistics of a Prisma Access deployment across all regions?

An enterprise requires mobile users connecting via Prisma Access to authenticate using an external SAML 2.0 Identity Provider (IdP) such as Okta or Azure AD. Where is this authentication profile referenced in Panorama for mobile users?

An enterprise is implementing Prisma Access and wants to ensure strict security governance. Which THREE capabilities are provided natively by Prisma Access security processing nodes (SPNs)? (Choose three)

An architect is designing a high-availability Remote Network location for Prisma Access. Which TWO methods can be used to ensure redundancy for branch office traffic connecting to Prisma Access? (Choose two)

An engineer is configuring Prisma Access for a remote network location that uses an IPSec tunnel to connect to the Prisma Access infrastructure. The engineer needs to ensure that the tunnel is highly available and can fail over to a secondary ISP if the primary ISP fails. Which two actions should the engineer take to achieve this? (Choose two.)

When planning a Prisma Access deployment for Mobile Users, which IP address allocation method is recommended and most commonly used for assigning virtual IP addresses to GlobalProtect clients?

An architect is designing a Prisma Access deployment for a company with offices in North America and Europe. The company wants to minimize latency for users accessing SaaS applications. Which Prisma Access feature should be leveraged to achieve this?

An administrator is planning to deploy Prisma Access for a company with a single data center and multiple branch offices. The administrator needs to ensure that branch office traffic to the internet is secured by Prisma Access, while traffic to the data center is routed directly. Which Prisma Access component must be deployed to connect the branch offices to Prisma Access?

An architect is planning a Prisma Access deployment for a multinational company with offices in North America, Europe, and Asia. The company requires that all internet-bound traffic from branch offices be inspected by Prisma Access, and that traffic to internal applications be routed through a Service Connection to a data center in Europe. The architect must minimize latency for internet-bound traffic while ensuring that internal traffic goes through the data center. Which design should the architect use?

An engineer is designing a Prisma Access deployment for a company that requires that all traffic from remote users be inspected by the same security policy stack regardless of the user's location. The company has offices in North America, Europe, and Asia. The engineer must ensure that the security policy is enforced consistently and that users always connect to the closest Prisma Access compute location. Which configuration should the engineer use to achieve this?

A security engineer is planning a Prisma Access deployment for a company with offices in North America and Europe. The company wants to ensure that users in each region connect to the nearest Prisma Access location to minimize latency. Which Prisma Access component should the engineer configure to achieve this?

Which cloud infrastructure providers host the backend Security Processing Nodes (SPNs) used by Prisma Access?

An administrator is deploying a new Prisma Access Remote Network location and needs to ensure that traffic from the branch is inspected by security policies before reaching the internet. Which configuration step is required to direct traffic to Prisma Access for inspection?

A security engineer is deploying Prisma Access and needs to ensure that explicit proxy traffic from remote users is inspected. Which component must be configured in the Prisma Access infrastructure to handle explicit proxy traffic?

An engineer is planning the initial deployment of Prisma Access for an organization that wants to avoid routing internal traffic through the corporate data center for internet-bound traffic. Which deployment component must be configured to allow mobile users to connect directly to Prisma Access and access the internet without backhauling through headquarters?

A network architect is planning a Prisma Access deployment for a company with a large remote workforce. The company wants to ensure that remote users can access both internet and internal applications securely. The architect decides to use Prisma Access for both internet and private application access. Which component must be configured to allow remote users to access internal applications hosted in the corporate data center?

An engineer is deploying Prisma Access for the first time and needs to onboard the infrastructure using the Prisma Access Cloud Management portal. The organization requires that all configuration changes be validated before being pushed to production. Which built-in workflow should the engineer use to meet this requirement?

An administrator needs to configure secure connectivity between a corporate data center and Prisma Access for headquarters-bound traffic. Which type of connection object should be created in Panorama?

An architect is planning a Prisma Access deployment with a Service Connection to a data center. The data center advertises a default route (0.0.0.0/0) to Prisma Access over BGP. The architect wants to ensure that internet-bound traffic from Remote Networks is inspected by Prisma Access and not sent back to the data center. Which configuration should be applied to prevent the default route from being used for internet traffic?

An architect is planning a Prisma Access deployment for a large enterprise with multiple Remote Network locations. The architect must ensure that the deployment meets the requirements for high availability and scalability. Which TWO factors should the architect consider when designing the Remote Network locations? (Choose two.)

An engineer is deploying a new Prisma Access tenant for a multinational company. The security team requires that all remote user traffic be inspected by a dedicated set of Security Processing Nodes located in the same region as the users, to minimize latency. The company has offices in North America, Europe, and Asia. Which deployment model should the engineer choose to meet this requirement?

During the initial deployment of Prisma Access for remote networks, an administrator needs to define the bandwidth allocation for a specific compute location. Which tool is used to manage and push this bandwidth allocation?

An administrator is configuring a Service Connection in Prisma Access and wants to ensure that traffic from remote networks to on-premises resources is routed correctly. The on-premises network uses BGP with a private AS number. Which configuration must be applied on the Prisma Access side to establish BGP peering?

An administrator is planning a Prisma Access deployment for a new branch office. The branch has a single ISP connection and requires high availability for Remote Network connectivity. Which Prisma Access feature should the administrator use to provide redundancy?

An administrator is configuring Prisma Access for remote users and needs to ensure that split tunneling is used for specific applications. Which Prisma Access component is responsible for enforcing split tunneling policies?

An administrator is setting up a new Prisma Access deployment and needs to ensure that the initial configuration is applied correctly. The administrator has already activated the Prisma Access license and is now in the Prisma Access configuration workflow. Which step must be completed first before configuring Remote Networks and Service Connections?

An architect is sizing a Prisma Access Remote Network location that experiences heavy video streaming traffic. Which factor is most critical when determining the required bandwidth license for this location?

An organization requires traffic from remote users to specific SaaS applications to bypass the Prisma Access cloud security processing nodes and go directly to the internet. Which feature should the administrator configure?

An administrator is configuring Prisma Access for the first time and needs to onboard the Prisma Access infrastructure. Which step must be completed before configuring Remote Networks and Service Connections?

A network engineer is configuring remote user access in Prisma Access and needs to ensure that internal corporate DNS resolution is utilized when users are connected via the GlobalProtect app. Where must the engineer configure the primary and secondary internal DNS server IP addresses?

An administrator is configuring a Remote Network in Prisma Access to connect a branch office. The branch office has a single ISP link and requires high availability. The administrator wants to ensure that if the primary IPSec tunnel fails, traffic automatically switches to a secondary tunnel. Which Prisma Access feature should be configured to achieve this?

An administrator is configuring QoS in Prisma Access for a Remote Network connection. Where must the QoS profile be applied to ensure priority handling for VoIP traffic coming from the branch?

An organization is integrating Prisma Access with their existing Panorama deployment. Which plugin must be installed on Panorama to enable the Prisma Access configuration workflows?

An administrator is reviewing the status of a Prisma Access deployment using Prisma Access Insights. Which THREE key metrics or insights can be viewed through this tool? (Choose three)

When designing a multi-region Prisma Access architecture, an architect must consider compute locations and routing preferences. Which THREE factors influence the selection and placement of compute locations? (Choose three)

An architect is designing a Prisma Access deployment for a global enterprise that requires low-latency connectivity for remote workers across North America, Europe, and Asia. Which component should the architect deploy to ensure traffic processing occurs closest to the user's geographical location?

An administrator is deploying Prisma Access and needs to ensure that remote users can access internal applications hosted in a data center. The data center is connected to Prisma Access via a service connection. The administrator wants to avoid exposing internal IP addresses to the internet. Which Prisma Access component should be used to securely route traffic from remote users to the data center?