A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
How can the engineer configure mobile users and branch locations to meet the requirements?
A. Use Explicit Proxy to filter internet traffic and provide access to data center resources using service connections.
B. Use Explicit Proxy and Remote Networks to filter internet traffic and provide access to data center resources using service connections.
C. Use GlobalProtect to filter internet traffic and provide access to data center resources using service connections.
D. Use GlobalProtect and Remote Networks to filter internet traffic and provide access to data center resources using service connections.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Which feature within Strata Cloud Manager (SCM) allows an operations team to view applications, threats, and user insights for branch locations for both NGFW and Prisma Access simultaneously?
A. Command Center
B. Log Viewer
C. SASE Health Dashboard
D. Branch Site Monitor
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
A malicious user is attempting to connect to a blocked website by crafting a packet using a fake SNI and the correct website in the HTTP host header.
Which option will prevent this form of attack?
A. Advanced URL Filtering and block the "Malicious Behavior" category
B. Advanced Threat Prevention option to block "Domain Fronting"
C. Advanced URL Filtering and block "SNI mismatch with Server Certificate (SAN/CN)"
D. SSL Decryption to "Block sessions on SNI mismatch with Server Certificate (SAN/CN)"
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
In an Explicit Proxy deployment where no agent can be used on the endpoint, which authentication method is supported with mobile users?
A. SSO
B. SAML
C. Kerberos
D. LDAP
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Which advanced AI-powered functionality does Strata Copilot provide to enhance the capabilities of Prisma Access security teams?
A. Real-time traffic analysis for automated threat prevention
B. Automated remediation of misconfigured security policies
C. Customized guidance for resolving issues through recommended next steps
D. Initial configuration of Prisma Access using a natural language interface
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
Which two actions can a company with Prisma Access deployed take to use the Egress IP API to automate policy rule updates when the IP addresses used by Prisma Access change? (Choose two.)
A. Enable the Egress IP API endpoint in Prisma Access.
B. Configure a webhook to receive notifications of IP address changes.
C. Copy the Egress IP API Key in the service infrastructure settings.
D. Download a client certificate to authenticate to the Egress IP API.
正解:B,D
解説: (Pass4Test メンバーにのみ表示されます)
1161 お客様のコメント





Kitajima -
前回の試験では勉強不足でほぼ感になり落ちてしまいましたが、
このSSE-Engineer問題集を勉強させてもらって、次回は受かりそうです。