Question 1

Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)

Options :

A : The client is misconfigured.

B : Create a do not decrypt rule for the hostname œgoogle.com.

C : The server has pinned certificates.

D : Create a do not decrypt rule for the hostname œcertificates.godaddy.com.

Answer: B,C

Question 2

A customer using Prisma Access (Managed by Panorama) wants to monitor traffic patterns across all remote networks and use Strata Logging Service to gather insights on network usage. An engineer notices that some network data is missing from the Application Command Center (ACC). What should the engineer do to ensure complete data visibility?

Options :

A :

Reconfigure the Prisma Access remote networks to log directly to Panorama instead of using Strata Logging Service.

B :

Verify that the Panorama web interface has been configured to aggregate logs from both the Panorama data and RN-SPNs.

C :

Enable the Use Data for Pre-Defined Reports' setting in the Logging and Reporting configuration on Panorama.

D :

Ensure that log forwarding profiles are applied to all Prisma Access policies and directed to Strata Logging Service.

Answer: D

Question 3

Which feature within Strata Cloud Manager (SCM) allows an operations team to view applications, threats, and user insights for branch locations for both NGFW and Prisma Access simultaneously?

Options :

A : Command Center

B : Log Viewer

C : Branch Site Monitor

D : SASE Health Dashboard

Answer: A

Question 4

What must be configured to accurately report an application's availability when onboarding a discovered application for ZTNA Connector?

Options :

A : icmp ping

B : https ping

C : tcp ping

D : udp ping

Answer: C

Question 5

A user connected to Prisma Access reports that traffic intermittently is denied after matching a Catch-All Deny rule at the bottom and bypassing HIP-based policies. Refreshing VPN connection restores the access. What are two reasons for this behavior? (Choose two.)

Options :

A : "Collect HIP data' needs to be enabled in the configuration.

B : User mapping is learned from sources other than gateway authentication.

C : Firewall loses user mapping due to missed HIP report checks.

D : HIP-enforced policy is scheduled for certain hours of the day.

Answer: B,C

Free SSE-Engineer Mock Exam – Practice Online Confidently

Buying Options: