Palo Alto Networks SSE-Engineer Exam Practice Questions (P. 2)
- Full Access (50 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #6
How can an engineer verify that only the intended changes will be applied when modifying Prisma Access policy configuration in Strata Cloud Manager (SCM)?
- AReview the SCM portal for blue circular indicators next to each configuration menu item and ensure only the intended areas of configuration have this indicator.
- BCompare the candidate configuration and the most recent version under “Config Version Snapshots.”
- CSelect the most recent job under Operations > Push Status to view the pending changes that would apply to Prisma Access.
- DOpen the push dialogue in SCM to preview all changes which would be pushed to Prisma Access.
send
light_mode
delete
Question #7
When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?
- ASpecified internal security appliance
- BDedicated cloud storage location
- CPanorama
- DStrata Cloud Manager (SCM)
send
light_mode
delete
Question #8
When a review of devices discovered by IoT Security reveals network routers appearing multiple times with different IP addresses, which configuration will address the issue by showing only unique devices?
- AAdd the duplicate entries to the ignore list in IoT Security.
- BMerge individual devices into a single device with multiple interfaces.
- CCreate a custom role to merge devices with the same hostname and operating system.
- DDelete all duplicate devices, keeping only those discovered using their management IP addresses.
send
light_mode
delete
Question #9
What is the impact of selecting the “Disable Server Response Inspection” checkbox after confirming that a Security policy rule has a threat protection profile configured?
- AOnly HTTP traffic from the server to the client will bypass threat inspection.
- BThe threat protection profile will override the “Disable Server Response Inspection” only for HTTP traffic from the server to the client.
- CAll traffic from the server to the client will bypass threat inspection.
- DThe threat protection profile will override the “Disable Server Response Inspection” for all traffic from the server to the client.
send
light_mode
delete
Question #10
A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links.
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?
- AConfigure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.
- BConfigure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.
- CConfigure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.
- DConfigure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.
send
light_mode
delete
All Pages