Palo Alto Networks SSE-Engineer - Palo Alto Networks Security Service Edge Engineer Exam
Page: 3 / 14
Total 68 questions
Question #11 (Topic: Exam A)
Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)
A. The client is misconfigured.
B. Create a do not decrypt rule for the hostname “google.com.”
C. The server has pinned certificates.
D. Create a do not decrypt rule for the hostname “certificates.godaddy.com.”
Answer: BC
Question #12 (Topic: Exam A)
How can a network security team be granted full administrative access to a tenant's configuration while restricting access to other tenants by using role-based access control (RBAC) for Panorama Managed Prisma Access in a multitenant environment?
A. Create an Access Domain and restrict access to only the Device Groups and Templates for the Target Tenant.
B. Create a custom role enabling all privileges within the specific tenant’s scope and assign it to the security team’s user accounts.
C. Create a custom role with Device Group and Template privileges and assign it to the security team’s user accounts.
D. Set the administrative accounts for the security team to the “Superuser” role.
Answer: A
Question #13 (Topic: Exam A)
An engineer has configured a Web Security rule that restricts access to certain web applications for a specific user group. During testing, the rule does not take effect as expected, and the users can still access blocked web applications.
What is a reason for this issue?
What is a reason for this issue?
A. The rule was created with improper threat management settings.
B. The rule was created in the wrong scope, affecting only GlobalProtect users instead of all users.
C. The rule was created at a higher level in the rule hierarchy, giving priority to a lower-level rule.
D. The rule was created at a lower level in the rule hierarchy, giving priority to a higher-level rule.
Answer: D
Question #14 (Topic: Exam A)
What will cause a connector to fail to establish a connection with the cloud gateway during the deployment of a new ZTNA Connector in a data center?
A. There is a misconfiguration in the DNS settings on the connector.
B. The connector is deployed behind a double NAT.
C. The connector is using a dynamic IP address.
D. There is a high latency in the network connection.
Answer: A
Question #15 (Topic: Exam A)
Which feature will fetch user and group information to verify whether a group from the Cloud Identity Engine is present on a security processing node (SPN)?
A. SASE Health Dashboard
B. User Activity Insights
C. Prisma Access Locations
D. Region Activity Insights
Answer: C
