Online SSE-Engineer Practice TestMore Paloalto-Networks Products >

Free Paloalto-Networks SSE-Engineer Exam Dumps Questions

Paloalto-Networks SSE-Engineer: Palo Alto Networks Security Service Edge Engineer

- Get instant access to SSE-Engineer practice exam questions

- Get ready to pass the Palo Alto Networks Security Service Edge Engineer exam right now using our Paloalto-Networks SSE-Engineer exam package, which includes Paloalto-Networks SSE-Engineer practice test plus an Paloalto-Networks SSE-Engineer Exam Simulator.

- The best online SSE-Engineer exam study material and preparation tool is here.

4.5

(10125 ratings)

Question 1

An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up.
Which two elements must the engineer validate to solve the issue? (Choose two.)

A. Secret

B. MRAI Timers

C. Peer AS Number

D. Advertise Default Route Checkbox

Correct Answer:AC

Question 2

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
How should Prisma Access be implemented to meet the customer requirements?

A. Deploy two Prisma Access instances - the first with mobile users, remote networks, and private access for all internal connection types, and the second with remote networks and private application access for B2B connections - and use the Strata Multitenant Cloud Manager Prisma Access configuration scope to manage access.

B. Deploy a Prisma Access instance with mobile users, remote networks, and private access for all connection types, and use the Prisma Access Configuration scope to manage all access.

C. Deploy two Prisma Access instances - the first with mobile users, remote networks, and private access for all internal connection types, and the second with remote networks and private application access for B2B connections - and use the specific configuration scope for the connection type to manage access.

D. Deploy a Prisma Access instance with mobile users, remote networks, and private access for all connection types, and use the specific configuration scope for the connection type to manage access.

Correct Answer:C

Question 3

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user- based policies.
Which two configurations need to be validated? (Choose two.)

A. Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.

B. Confirm there is a Security policy configured in Prisma Access to allow the communication on port 5007.

C. Confirm the Collector Pre-Shared Keys match between Prisma Access and the on- premises firewall.

D. Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.

Correct Answer:AD

Question 4

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links.
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

A. Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.

B. Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.

C. Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.

D. Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.

Correct Answer:B

Question 5

Which overlay protocol must a customer premises equipment (CPE) device support when terminating a Partner Interconnect-based Colo-Connect in Prisma Access?

A. Geneve

B. IPSec

C. GRE

D. DTLS

Correct Answer:B

Question 6

Which feature within Strata Cloud Manager (SCM) allows an operations team to view applications, threats, and user insights for branch locations for both NGFW and Prisma Access simultaneously?

A. Command Center

B. Log Viewer

C. Branch Site Monitor

D. SASE Health Dashboard

Correct Answer:A

START SSE-Engineer EXAM