Free Palo Alto Networks SSE-Engineer Exam Dumps Questions & Answers

A financial institution needs to prevent employees from easily moving textual information from secure financial portals accessed using Prisma Access Browser (PAB) directly into other applications on their workstations. The goal is to stop the practice of selecting data within the browser and then inserting that selected content into external documents or programs. Which PAB control should be configured to disable this particular method of data transference?

• A.  Data Transfer
• B.  Data loss prevention (DLP)
• C.  Webpage Data Masking
• D.  Clipboard

What is the flow impact of updating the Cloud Services plugin on existing traffic flows in Prisma Access?

• A.  They will automatically terminate when the upgrade begins.
• B.  They will be unaffected because the plugin upgrade is transparent to users.
• C.  They will experience latency during the plugin upgrade process.
• D.  They will be unaffected only if Panorama is deployed in high availability (HA) mode.

What is the network impact when a Prisma Access service connection is set as a dedicated service connection for traffic steering?

• A.  It changes its zone to Untrust, applies source NAT to forwarded traffic, and no longer participates in BGP routing.
• B.  It applies destination NAT to forwarded traffic, maintains its BGP routing configurations, and allows traffic from both Trust and Untrust zones.
• C.  It maintains its zone as Trust; however, it disables all Security policies, allowing unrestricted traffic flow through the dedicated service connection.
• D.  It maintains its zone as Trust and continues to participate in both internal and external BGP routing.

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links. With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

• A.  Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.
• B.  Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.
• C.  Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.
• D.  Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.

Which Cloud Identity Engine capability will create a Security policy that uses Entra ID attributes as the source identification?

• A.  Attribute Group Mapping
• B.  Entra ID Group Attribute
• C.  Cloud Dynamic User Group
• D.  Entra ID Cloud Group