Online Access Free SSE-Engineer Practice Test

When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?

• A.Specified internal security appliance
• B.Strata Cloud Manager (SCM)
• C.Panorama
• D.Dedicated cloud storage location

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer selects the
"Overlapping Subnets" checkbox.
Which Remote Network flow is supported after onboarding in this scenario?

• A.To remote network
• B.To the internet
• C.To private applications
• D.To mobile users

An engineer configures a Security policy for traffic originating at branch locations in the Remote Networks configuration scope. After committing the configuration and reviewing the logs, the branch traffic is not matching the Security policy.
Which statement explains the branch traffic behavior?

• A.The Security policy did not meet best practice standards and was automatically removed.
• B.The traffic is matching a Security policy in the Prisma Access configuration scope.
• C.The source zone was configured as "Trust."
• D.The source address was configured with an address object including the branch location prefixes.

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user-based policies.
Which two configurations need to be validated? (Choose two.)

• A.Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.
• B.Confirm there is a Security policy configured in Prisma Access to allow the communication on port
  5007.
• C.Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.
• D.Confirm the Collector Pre-Shared Keys match between Prisma Access and the on-premises firewall.

When a review of devices discovered by IoT Security reveals network routers appearing multiple times with different IP addresses, which configuration will address the issue by showing only unique devices?

• A.Delete all duplicate devices, keeping only those discovered using their management IP addresses.
• B.Merge individual devices into a single device with multiple interfaces.
• C.Create a custom role to merge devices with the same hostname and operating system.
• D.Add the duplicate entries to the ignore list in IoT Security.