SSE-Engineer by Palo Alto Networks Actual Free Exam Questions And Answers

Question 1

What must be configured to accurately report an application's availability when onboarding a discovered application for ZTNA Connector?

A. udp ping

B. icmp ping

C. https ping

D. tcp ping

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?

A. Specified internal security appliance

B. Panorama

C. Dedicated cloud storage location

D. Strata Cloud Manager (SCM)

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links.
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

A. Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.

B. Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.

C. Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.

D. Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which policy configuration in Prisma Access Browser (PAB) will protect an organization from malicious BYOD and minimize the impact on the user experience?

A. One that blocks file exchange

B. One that blocks elements such as screen scrapers

C. One for session recording

D. One that allows access to applications with data masking or watermarking

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

How can an engineer use risk score customization in SaaS Security Inline to limit the use of unsanctioned SaaS applications by employees within a Security policy?

A. Build an application filter using unsanctioned SaaS as the characteristic.

B. Increase the risk score for all SaaS applications to automatically block unwanted applications.

C. Build an application filter using unsanctioned SaaS as the category.

D. Lower the risk score of sanctioned applications and increase the risk score for unsanctioned applications.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

What will cause a connector to fail to establish a connection with the cloud gateway during the deployment of a new ZTNA Connector in a data center?

A. There is a misconfiguration in the DNS settings on the connector.

B. The connector is deployed behind a double NAT.

C. The connector is using a dynamic IP address.

D. There is a high latency in the network connection.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Palo Alto Networks Security Service Edge Engineer - SSE-Engineer Exam Practice Test

Contact Us

Useful Links

Latest Updated