Palo Alto Networks Security Service Edge Engineer (SSE-Engineer) Free Practice Test

Question 1

Which statement is valid in relation to certificates used for Global Protect and pre-logon?

A. A public certificate authority (CA) must sign and validate all certificates used.

B. Certificates must be deployed in the Machine Certificate Store.

C. The Global Protect agent may be used to distribute pre-logon certificates.

D. The certificate used for pre-logon must include both Subject and Subject-Alt fields.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to its data centers. [Scenario as before, with overlapping prefixes advertised by B2B partners.] Which two actions will meet the customer requirements for the B2B connections? (Choose two.)

A. Configure service connections for data center connectivity.

B. NAT the traffic at the customer premises equipment (CPE).

C. Advertise the corresponding network prefixes using eBGP or static routes.

D. Configure remote networks with NAT pools for each of the B2B connections.

Correct Answer: C,D

Question 3

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links. With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

A. Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.

B. Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.

C. Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.

D. Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which two Prisma Access Browser (PAB) configurations will provide a contractor SSH access to an internal system? (Choose two.)

A. Configure Internal Application entries, Configure Access & Data Control policy

B. Configure Remote Connection Application entries, Configure Access & Data Control policy

C. Enable Remote Connections

D. Enable Internal Connections

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive this error message: Error: Prisma Access Portal Authentication Failed using CIE-SAML with message " 400 Bad Request " . Which action will identify the root cause of this error? URLs and certificates are correctly configured.

A. Verify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.

B. Review the Authentication logs in Strata Cloud Manager to check for any SAML error messages or authentication failures.

C. Verify the SAML metadata configuration in both Strata Cloud Manager and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.

D. Examine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

An organization deploys the Prisma Access Browser (PAB) to secure web access from diverse endpoints, including personal devices where IT has limited control. To maintain a strong and proactive security posture across these varied environments, why is the use of PAB device posture attributes, such as OS version, file system encryption, and device type, considered essential?

A. It provides the administrators of PAB the ability to enable disk encryption on all endpoints.

B. It allows administrators to identify and restrict access based on OS version and browser type on unmanaged devices.

C. It enables the administrators of PAB to independently perform OS and browser patching on unmanaged devices.

D. It permits PAB to function as a standalone endpoint detection and response (EDR) solution.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which feature will fetch user and group information to verify whether a group from the Cloud Identity Engine is present on a security processing node (SPN)?

A. User Activity Insights

B. SASE Health Dashboard

C. Region Activity Insights

D. Prisma Access Locations

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks Security Service Edge Engineer (SSE-Engineer) Free Practice Test