Palo Alto Networks SSE-Engineer Exam Questions Instant Access

Question 1

An intern is tasked with changing the Anti-Spyware Profile used for security rules defined in the Global Protect folder. All security rules are using the Default Prisma Profile. The intern reports that the options are greyed out and cannot be modified when selecting the Default Prisma Profile. Based on the image below, which action will allow the intern to make the required modifications?

ARequest edit access for the Global Protect scope.

BChange the configuration scope to Prisma Access and modify the profile group.

CCreate a new profile, because default profile groups cannot be modified.

DModify the existing anti-spyware profile, because best-practice profiles cannot be removed from a group.

Answer : C

Question 2

What are two advantages the Prisma Access Browser (PAB) offers in providing consistent security for accessing web-based resources across corporate-managed laptops and personal devices, as well as contractors using devices issued by third parties? (Choose two.)

AIt enforces SSL Forward Proxy decryption to enable inspection of encrypted traffic, allowing for enhanced security and threat prevention capabilities.

BIt provides all users on any devices secure access to the internet with enhanced security and threat prevention capabilities for encrypted traffic.

CIt routes all traffic to Prisma Access to perform deep packet inspection of encrypted traffic, allowing for enhanced security and threat prevention capabilities.

DIt applies an encryption layer to protect all browser assets with a trusted encryption chain that is independent of the operating system.

Answer : B, D

Question 3

A network administrator is enabling users, via Prisma Access Browser (PAB), to securely access internal web applications hosted exclusively within the organization's private data center. Which two Prisma Access infrastructure components are primarily configured to establish the necessary connection pathways from Prisma Access to these internal data center resources? (Choose two.)

AExplicit Proxy

BZTNA Connector

CPrivileged Remote Access

DService Connection

Answer : B, D

Question 4

Which two Prisma Access Browser (PAB) configurations will provide a contractor SSH access to an internal system? (Choose two.)

AConfigure Internal Application entries, Configure Access & Data Control policy

BEnable Remote Connections

CConfigure Remote Connection Application entries, Configure Access & Data Control policy

DEnable Internal Connections

Answer : B, C

Question 5

In addition to creating a Security policy, how can an AI Access Security be used to prevent users from uploading financial information to ChatGPT?

AApply File Blocking to stop file uploads containing financial information.

BConfigure an Enterprise DLP rule to block uploads containing financial information.

CAdd the ChatGPT domains using URL Filtering to block uploads containing financial information.

DApply a vulnerability profile to stop attempts to exploit system flaws or gain unauthorized access to financial systems.

Answer : B

Question 6

An administrator needs to enforce access to all applications via Prisma Access Browser (PAB) for unmanaged or non-compliant devices. Configuration of which two enforcement actions will ensure all access to applications only happens through PAB? (Choose two.)

AFor SSO-enabled applications, configure Enforce SSO.

BUse Account Protection for non SSO-enabled applications.

CUse the PAB Extension to redirect traffic through Prisma Access.

DUse Device Posture to allow or block traffic.

Answer : A, B

Question 7

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to its data centers. The solution must meet these requirements: * The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations. * The branch locations must have internet filtering and data center connectivity. * The B2B partner connections must only have access to internally hosted proprietary applications running on non-standard ports. * There are overlapping prefixes advertised by the B2B partners. Which two actions will meet the customer requirements for the B2B connections? (Choose two.)

AAdvertise the corresponding network prefixes using eBGP or static routes.

BConfigure remote networks with NAT pools for each of the B2B connections.

CConfigure service connections for data center connectivity.

DNAT the traffic at the customer premises equipment (CPE).

Answer : A, B

Palo Alto Networks Security Service Edge Engineer SSE-Engineer Exam Questions