Prisma Access Quiz - Page 5 & Results

41. How is the Cloud Services plugin on Panorama typically updated?

Automatically via Prisma Access.

Automatically when Panorama software is updated.

Manually by downloading from the Support Portal and installing via Panorama > Plugins.

Via the GlobalProtect client.

42. What is a key best practice regarding policy rule structure?

Place general rules above specific rules.

Use 'any' in the application field for simplicity.

Rely solely on IP addresses for matching criteria.

Place specific rules above general rules and use App-ID/User-ID where possible.

43. Why is implementing redundancy for Service Connections particularly important?

To reduce the number of Security Policies needed.

Service Connections often carry critical traffic for accessing internal corporate resources.

It is required for enabling SSL decryption.

To simplify BGP configuration.

44. Which best practice relates to managing configuration changes in Prisma Access, especially when using Panorama?

Make large changes directly in production without testing.

Avoid using Templates and Device Groups.

Use staged rollouts, peer reviews, and leverage Panorama Templates/Device Groups for consistency.

Never back up the Panorama configuration.

45. Which log type would you primarily check to verify if a user's group membership was correctly identified for policy evaluation?

Traffic Logs

Threat Logs

User-ID Logs

Configuration Logs

46. Which feature allows GlobalProtect to provide access to internal web applications via a browser without installing the full client?

Clientless VPN

HIP Checks

Split Tunneling

Always On VPN

47. If BGP is established over an IPSec tunnel, but routes are not being learned correctly by Prisma Access from a Remote Network, what should be checked?

The Pre-Shared Key used for IPSec.

Route advertisements and filters on the branch BGP peer.

The Mobile User IP pool configuration.

The Cortex Data Lake connection status.

48. What is the main purpose of defining specific 'Compute Locations' during Prisma Access onboarding?

To select the physical location of Panorama.

To define IP address pools for mobile users.

To specify the geographic regions where Prisma Access infrastructure (Gateways, SPNs) should be deployed for optimal user/site latency.

To configure Cortex Data Lake storage regions.

49. True or False: Prisma Access relies solely on the GlobalProtect client for User-ID information.

True

False

50. Which Prisma Access component is analogous to an on-premises VPN concentrator but is cloud-delivered and integrates the full security stack?

Service Connection

GlobalProtect components (Portal/Gateway) within Prisma Access

Cortex Data Lake

Remote Network Tunnel Endpoint

Prisma Access Quiz (Page 5 of 5)

Quiz Results

Detailed Answers & Explanations