QUESTION: 1

A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic.
Which recommendation should the Systems Engineer make to this customer?

With the explicit proxy license add-on, set up GlobalProtect.
With the mobile user license, set up explicit proxy.
With the explicit proxy license, set up a service connection.
With the mobile user license, set up a corporate access node.

Answer(s): B

Reveal Solution Next Question

QUESTION: 2

What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

A heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.
It prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.
Protection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.
It creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Answer(s): C

Reveal Solution Next Question

QUESTION: 3

Which action protects against port scans from the internet?

Apply App-ID Security policy rules to block traffic sourcing from the untrust zone.
Assign Security profiles to Security policy rules for traffic sourcing from the untrust zone.
Apply a Zone Protection profile on the zone of the ingress interface.
Assign an Interface Management profile to the zone of the ingress surface.

Answer(s): C

Reveal Solution Next Question