SSE-Engineer無料問題集「Palo Alto Networks Security Service Edge Engineer」

質問 1

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
Which two options will allow the engineer to support the requirements? (Choose two.)

（A）Enable Remote Networks Advertise Default Route.

（B）Enable eBGP for dynamic routing and configure RemoteNetworks.

（C）Configure Remote Networks and define the branch IP subnets using Static Routes.

（D）Configure the CPE with Static Routes pointing to Prisma Access Infrastructure and Mobile User routes.

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive this error message:
Error: Prisma Access Portal Authentication Failed using CIE-SAML with message "400 Bad Request" Which action will identify the root cause of this error?

（A）Verify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.

（B）Examine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.

（C）Review the Authentication logs in Strata Cloud Manager to check for any SAML error messages or authentication failures.

（D）Verify the SAML metadata configuration in both Strata Cloud Manager and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?

（A）Dedicated cloud storage location

（B）Panorama

（C）Specified internal security appliance

（D）Strata Cloud Manager (SCM)

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links.
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

（A）Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.

（B）Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.

（C）Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.

（D）Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

How can a senior engineer use Strata Cloud Manager (SCM) to ensure that junior engineers are able to create compliant policies while preventing the creation of policies that may result in security gaps?

（A）Use security checks under posture settings and set the action to "deny" for all checks that do not meet the compliance standards.

（B）Configure an auto tagging rule in SCM to trigger a Security policy review workflow based on a security rule tag, then instruct junior engineers to use this tag for all new Security policies.

（C）Configure role-based access controls (RBACs) for all junior engineers to limit them to creating policies in a disabled state, manually review the policies, and enable them using a senior engineer role.

（D）Run a Best Practice Assessment (BPA) at regular intervals and manually revert any policies not meeting company compliance standards.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SSE-Engineer 無料問題集「Palo Alto Networks Security Service Edge Engineer」

弊社を連絡する

関連リンク

トップ試験