Online Access Free SSE-Engineer Practice Test

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user-based policies. Which two configurations need to be validated? (Choose two.)

• A.Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.
• B.Confirm there is a Security policy configured in Prisma Access to allow the communication on port
  5007.
• C.Confirm the Collector Pre-Shared Keys match between Prisma Access and the on-premises firewall.
• D.Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.

In addition to creating a Security policy, how can an AI Access Security be used to prevent users from uploading financial information to ChatGPT?

• A.Configure an Enterprise DLP rule to block uploads containing financial information.
• B.Apply File Blocking to stop file uploads containing financial information.
• C.Apply a vulnerability profile to stop attempts to exploit system flaws or gain unauthorized access to financial systems.
• D.Add the ChatGPT domains using URL Filtering to block uploads containing financial information.

An organization wants Prisma Access Browser (PAB) users to authenticate to public cloud services, such as Microsoft 365, using its existing corporate IdP (e.g., Azure AD). Which integration is essential to enable this automated single sign-on (SSO) experience for public cloud applications accessed via PAB?

• A.Deployment of a browser-specific SSO extension
• B.Direct integration of the browser with Microsoft ' s Conditional Access policies
• C.Configuration of individual user authentication tokens within the PAB profile
• D.Cloud Identity Engine integration with the corporate IdP

A network administrator is enabling users, via Prisma Access Browser (PAB), to securely access internal web applications hosted exclusively within the organization ' s private data center. Which two Prisma Access infrastructure components are primarily configured to establish the necessary connection pathways from Prisma Access to these internal data center resources? (Choose two.)

• A.Service Connection
• B.Explicit Proxy
• C.Privileged Remote Access
• D.ZTNA Connector

A user connected to Prisma Access reports that traffic intermittently is denied after matching a Catch-All Deny rule at the bottom and bypassing HIP-based policies. Refreshing VPN connection restores the access.
What are two reasons for this behavior? (Choose two.)

• A.HIP-enforced policy is scheduled for certain hours of the day.
• B." Collect HIP data " needs to be enabled in the configuration.
• C.Firewall loses user mapping due to missed HIP report checks.
• D.User mapping is learned from sources other than gateway authentication.