Prisma Access Quiz

11. How can Security Policies leverage HIP check results?

By specifying HIP Objects/Profiles in the Source User field.

By specifying HIP Objects/Profiles as match criteria in the rule.

By attaching a HIP profile directly to the GlobalProtect Gateway.

HIP results cannot be directly used in Security Policies.

12. What technology is primarily used to connect Remote Networks (branch offices) to Prisma Access?

SSL VPN

GlobalProtect Client

IPSec VPN

GRE Tunnels

13. Which routing protocol is strongly recommended for exchanging routes dynamically between Prisma Access and Remote Networks/Service Connections?

OSPF

EIGRP

Static Routing

BGP

14. What is a critical IP addressing consideration when planning Mobile User IP pools and Service Connections?

Mobile User pools must use public IP addresses.

Service Connection subnets must overlap with Mobile User pools.

Mobile User IP pools must NOT overlap with internal subnets reachable via Service Connections.

All internal networks must use the same RFC1918 range.

15. When configuring an IPSec tunnel for a Remote Network, which parameters must match exactly on both Prisma Access and the branch device?

Only the Pre-Shared Key or Certificate.

Only the IKE version and BGP ASN.

IKE/IPSec Crypto Profiles, DH Group, Lifetimes, PSK/Certificate, Peer ID.

Only the tunnel interface IP addresses.

16. What is the term for the Prisma Access licensing model where bandwidth is shared dynamically across multiple Remote Network sites?

Per-Compute Location Bandwidth

Aggregate Bandwidth Pool

User-Based Bandwidth

Site-Specific Allocation

17. What is the primary benefit of configuring redundant tunnels for Remote Networks or Service Connections using BGP?

Increased single-tunnel throughput.

Simplified IPSec configuration.

Automatic failover and potential load sharing (ECMP).

Elimination of the need for Cortex Data Lake.

18. In Panorama-managed Prisma Access, where are network settings like BGP configuration, tunnel interfaces, and GlobalProtect settings typically defined?

Device Groups

Templates / Template Stacks

Security Policy Rules

Log Forwarding Profiles

19. In Panorama-managed Prisma Access, where are Security Policies, NAT Policies, and Security Profiles (like Antivirus, URL Filtering) primarily configured?

Templates / Template Stacks

Cloud Services Plugin Setup

Device Groups

Cortex Data Lake

20. What is the function of the Cloud Services plugin installed on Panorama?

To store Prisma Access logs locally on Panorama.

To act as the primary data plane for Prisma Access traffic.

To bridge Panorama management with the Prisma Access cloud service for configuration and monitoring.

To enforce HIP checks on endpoints.

Prisma Access Quiz (Page 2 of 5)