SSE-Engineer Paloalto-Networks Exam Questions and Free Practice Test

Question 13

Which two actions can a company with Prisma Access deployed take to use the Egress IP API to automate policy rule updates when the IP addresses used by Prisma Access change? (Choose two.)

A. Configure a webhook to receive notifications of IP address changes.

B. Copy the Egress IP API Key in the service infrastructure settings.

C. Enable the Egress IP API endpoint in Prisma Access.

D. Download a client certificate to authenticate to the Egress IP API.

Correct Answer:AD

Question 14

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
How can the engineer configure mobile users and branch locations to meet the requirements?

A. Use GlobalProtect and Remote Networks to filter internet traffic and provide access to data center resources using service connections.

B. Use Explicit Proxy to filter internet traffic and provide access to data center resources using service connections.

C. Use GlobalProtect to filter internet traffic and provide access to data center resources using service connections.

D. Use Explicit Proxy and Remote Networks to filter internet traffic and provide access to data center resources using service connections.

Correct Answer:A

Question 15

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer selects the ??Overlapping Subnets?? checkbox.
Which Remote Network flow is supported after onboarding in this scenario?

A. To private applications

B. To the internet

C. To remote network

D. To mobile users

Correct Answer:A

START SSE-Engineer EXAM