Free Palo Alto Networks SSE-Engineer Exam Dumps Questions & Answers

A customer using Prisma Access (Managed by Panorama) wants to monitor traffic patterns across all remote networks and use Strata Logging Service to gather insights on network usage. An engineer notices that some network data is missing from the Application Command Center (ACC). What should the engineer do to ensure complete data visibility?

• A.  Reconfigure the Prisma Access remote networks to log directly to Panorama instead of using Strata Logging Service.
• B.  Verify that the Panorama web interface has been configured to aggregate logs from both the Panorama data and RN-SPNs.
• C.  Enable the " Use Data for Pre-Defined Reports " setting in the Logging and Reporting configuration on Panorama.
• D.  Ensure that log forwarding profiles are applied to all Prisma Access policies and directed to Strata Logging Service.

All mobile users are unable to authenticate to Prisma Access (Managed by Strata Cloud Manager) using SAML authentication through the Cloud Identity Engine. Users report that after entering their credentials on the Identity Provider (IdP) login page, they are redirected to the Prisma Access portal without successful authentication, and they receive this error message: Error: Prisma Access Portal Authentication Failed using CIE-SAML with message " 400 Bad Request " . Which action will identify the root cause of this error? URLs and certificates are correctly configured.

• A.  Verify the SAML metadata configuration in both Strata Cloud Manager and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.
• B.  Examine the Security policy rules in Prisma Access to ensure that traffic from the IdP is allowed and not blocked.
• C.  Verify the SAML metadata configuration in both the Cloud Identity Engine and the IdP portal to confirm that the endpoint URLs and certificates are correctly configured.
• D.  Review the Authentication logs in Strata Cloud Manager to check for any SAML error messages or authentication failures.

An administrator is configuring a dedicated visitor sign-in kiosk in the main corporate office using Prisma Access Browser (PAB). A key security requirement is to ensure the device is locked down, which includes preventing users from creating paper copies of any on-screen information. The policy must specifically apply to this fixed-location kiosk. Which two PAB match criteria will enforce these restrictions on the kiosk?
(Choose two.)

• A.  Defining the policy scope based on location, specifying the location of the corporate offices
• B.  Defining the policy scope based on networks, specifying the corporate public IP range or CIDR
• C.  Configuring the print control as the specific data control for the rule
• D.  Configuring the kiosk control, which prevents printing

A company is using Prisma Access with Cloud Identity Engine for user-based policies. Which two system configurations will dynamically grant users access to specific projects based on their group membership in Microsoft Entra ID? (Choose two.)

• A.  Implement an authentication sequence in Prisma Access that prioritizes Cloud Identity Engine authentication for users belonging to project-specific groups.
• B.  In the Cloud Identity Engine, add the Microsoft Entra ID directory as an IdP and configure the required user group mappings for each project.
• C.  Configure Dynamic Privilege Access settings in Prisma Access and associate the user groups with the corresponding project IP address pools.
• D.  Create a custom application in Microsoft Entra ID representing each project and configure SSO with the Cloud Identity Engine.

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer selects the " Overlapping Subnets " checkbox. Which Remote Network flow is supported after onboarding in this scenario?

• A.  To mobile users
• B.  To private applications
• C.  To the internet
• D.  To remote network