최신 SSE-Engineer 무료덤프 - Palo Alto Networks Security Service Edge Engineer

문제1

How can role-based access control (RBAC) for Prisma Access (Managed by Strata Cloud Manager) be used to grant each member of a security team full administrative access to manage the Security policy in a single tenant while restricting access to other tenants in a multitenant deployment?

A. Add the team to the Parent Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.

B. Add the team to the Parent Tenant, select the Prisma Access Configuration Scope, and set the role to Security Administrator.

C. Add the team to the Child Tenant, select All Apps & Services, and set the role to Security Administrator.

D. Add the team to the Child Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

An employee reports being unable to use any video conferencing features across various web-based collaboration tools. However, colleagues not using the Prisma Access Browser (PAB) can use these features without any problem. Which two policy rule types or categories control this configuration? (Choose two.)

A. Browser Security Controls

B. Network Security Controls

C. Access & Data Controls

D. Browser Customization Controls

정답: A,C

설명: (DumpTOP 회원만 볼 수 있음)

문제3

An engineer has configured a Web Security rule that restricts access to certain web applications for a specific user group. During testing, the rule does not take effect as expected, and the users can still access blocked web applications. What is a reason for this issue?

A. The rule was created at a lower level in the rule hierarchy, giving priority to a higher-level rule.

B. The rule was created in the wrong scope, affecting only GlobalProtect users instead of all users.

C. The rule was created with improper threat management settings.

D. The rule was created at a higher level in the rule hierarchy, giving priority to a lower-level rule.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

A security administrator wants to use Cloud Identity Engine to automate the application of Security policies for mobile users based on specific metadata from their Microsoft Entra ID profiles, such as job title and department. The administrator wants to avoid manual group management of these policies. Which feature can the administrator use to create a Security policy that dynamically identifies the users? (Choose one answer)

A. Cloud Dynamic User Group

B. Entra ID Group Attribute

C. Entra ID Cloud Group

D. Attribute Group Mapping

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Which feature will fetch user and group information to verify whether a group from the Cloud Identity Engine is present on a security processing node (SPN)?

A. Region Activity Insights

B. SASE Health Dashboard

C. Prisma Access Locations

D. User Activity Insights

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

How can an engineer verify that only the intended changes will be applied when modifying Prisma Access policy configuration in Strata Cloud Manager (SCM)?

A. Review the SCM portal for blue circular indicators next to each configuration menu item and ensure only the intended areas of configuration have this indicator.

B. Select the most recent job under Operations > Push Status to view the pending changes that would apply to Prisma Access.

C. Open the push dialogue in SCM to preview all changes which would be pushed to Prisma Access.

D. Compare the candidate configuration and the most recent version under " Config Version Snapshots. "

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

How can an engineer use risk score customization in SaaS Security Inline to limit the use of unsanctioned SaaS applications by employees within a Security policy?

A. Increase the risk score for all SaaS applications to automatically block unwanted applications.

B. Lower the risk score of sanctioned applications and increase the risk score for unsanctioned applications.

C. Build an application filter using unsanctioned SaaS as the category.

D. Build an application filter using unsanctioned SaaS as the characteristic.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제8

What is the network impact when a Prisma Access service connection is set as a dedicated service connection for traffic steering?

A. It applies destination NAT to forwarded traffic, maintains its BGP routing configurations, and allows traffic from both Trust and Untrust zones.

B. It maintains its zone as Trust and continues to participate in both internal and external BGP routing.

C. It maintains its zone as Trust; however, it disables all Security policies, allowing unrestricted traffic flow through the dedicated service connection.

D. It changes its zone to Untrust, applies source NAT to forwarded traffic, and no longer participates in BGP routing.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 SSE-Engineer 무료덤프 - Palo Alto Networks Security Service Edge Engineer

우리와 연락하기

유용한 링크

최신 업데이트