SSE-Engineer by Palo Alto Networks Actual Free Exam Questions And Answers

Question 1

When a review of devices discovered by IoT Security reveals network routers appearing multiple times with different IP addresses, which configuration will address the issue by showing only unique devices?

A. Merge individual devices into a single device with multiple interfaces.

B. Create a custom role to merge devices with the same hostname and operating system.

C. Add the duplicate entries to the ignore list in IoT Security.

D. Delete all duplicate devices, keeping only those discovered using their management IP addresses.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

A customer using Prisma Access (Managed by Panorama) wants to monitor traffic patterns across all remote networks and use Strata Logging Service to gather insights on network usage. An engineer notices that some network data is missing from the Application Command Center (ACC). What should the engineer do to ensure complete data visibility?

A. Reconfigure the Prisma Access remote networks to log directly to Panorama instead of using Strata Logging Service.

B. Ensure that log forwarding profiles are applied to all Prisma Access policies and directed to Strata Logging Service.

C. Verify that the Panorama web interface has been configured to aggregate logs from both the Panorama data and RN-SPNs.

D. Enable the " Use Data for Pre-Defined Reports " setting in the Logging and Reporting configuration on Panorama.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

How can role-based access control (RBAC) for Prisma Access (Managed by Strata Cloud Manager) be used to grant each member of a security team full administrative access to manage the Security policy in a single tenant while restricting access to other tenants in a multitenant deployment?

A. Add the team to the Child Tenant, select All Apps & Services, and set the role to Security Administrator.

B. Add the team to the Child Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.

C. Add the team to the Parent Tenant, select Prisma Access & NGFW Configuration, and set the role to Security Administrator.

D. Add the team to the Parent Tenant, select the Prisma Access Configuration Scope, and set the role to Security Administrator.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

A company is migrating from NGFW-hosted Global Protect to Prisma Access Mobile Users. The authentication method will change from LDAP with Windows Active Directory Domain Controllers to SAML with Microsoft Entra ID. After configuring and applying the SAML Authentication Profile to the Mobile Users configuration, the migrated group-based Security policies are no longer functioning. Which User-ID setting must be updated for the group-based Security policies to begin functioning?

A. Configure a redistribution profile to send user-to-group mapping from the Global Protect firewalls to Prisma Access.

B. Modify the group mapping settings by updating the User Attributes to include " userPrincipalName. "

C. Change the SAML Authentication profile Username Modifier to %USERDOMAIN%\% USERINPUT%.

D. Migrate group mapping to Cloud Identity Engine using an agent to query the Windows Active Directory Domain Controllers.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

What must be configured to accurately report an application ' s availability when onboarding a discovered application for ZTNA Connector?

A. udp ping

B. icmp ping

C. https ping

D. tcp ping

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which feature can help address a customer concern about the length of time it takes to update their SaaS- allowed IP addresses while onboarding to Prisma Access?

A. Traffic steering

B. Dynamic IP pooling

C. Dedicated IP addresses

D. DNS-based load balancing

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

After configuring domain-based split tunnel for zoom.us, how is expected behavior on the client machine confirmed?

A. Verify zoom.us is resolved by the tunnel assigned DNS server.

B. Verify from the routing table.

C. Ping zoom.us from the CLI.

D. Enable dump level logs on Global Protect Application.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to their data centers. [Same scenario.] Which two components can be provisioned to enable data center connectivity over the internet? (Choose two.)

A. Colo-Connect

B. ZTNA Connector

C. SD-WAN Connector

D. Service connections

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Palo Alto Networks Security Service Edge Engineer - SSE-Engineer Exam Practice Test

Contact Us

Useful Links

Latest Updated