Join the discussion
Question 1/23
What would make a customer choose an on-premises solution over a cloud-based SASE solution for their network?
Correct Answer: B
SASE (Secure Access Service Edge) is a cloud-based solution that combines networking and security capabilities to address modern enterprise needs. However, there are scenarios where an on-premises solution is more appropriate.
A: High growth phase with existing and planned mergers, and with acquisitions being integrated.
This scenario typically favors a SASE solution since it provides flexible, scalable, and centralized security that is ideal for integrating newly acquired businesses.
B: Most employees and applications in close physical proximity in a geographic region.
This scenario supports the choice of an on-premises solution. When employees and applications are concentrated in a single geographic region, traditional on-premises firewalls and centralized security appliances provide cost-effective and efficient protection without the need for distributed, cloud-based infrastructure.
C: Hybrid work and cloud adoption at various locations that have different requirements per site.
This scenario aligns with a SASE solution. Hybrid work and varying site requirements are better addressed by SASE's ability to provide consistent security policies regardless of location.
D: The need to enable business to securely expand its geographical footprint.
Expanding into new geographic areas benefits from the scalability and flexibility of a SASE solution, which can deliver consistent security globally without requiring physical appliances at each location.
Key Takeaways:
* On-premises solutions are ideal for geographically concentrated networks with minimal cloud adoption.
* SASE is better suited for hybrid work, cloud adoption, and distributed networks.
References:
* Palo Alto Networks SASE Overview
* On-Premises vs. SASE Deployment Guide
A: High growth phase with existing and planned mergers, and with acquisitions being integrated.
This scenario typically favors a SASE solution since it provides flexible, scalable, and centralized security that is ideal for integrating newly acquired businesses.
B: Most employees and applications in close physical proximity in a geographic region.
This scenario supports the choice of an on-premises solution. When employees and applications are concentrated in a single geographic region, traditional on-premises firewalls and centralized security appliances provide cost-effective and efficient protection without the need for distributed, cloud-based infrastructure.
C: Hybrid work and cloud adoption at various locations that have different requirements per site.
This scenario aligns with a SASE solution. Hybrid work and varying site requirements are better addressed by SASE's ability to provide consistent security policies regardless of location.
D: The need to enable business to securely expand its geographical footprint.
Expanding into new geographic areas benefits from the scalability and flexibility of a SASE solution, which can deliver consistent security globally without requiring physical appliances at each location.
Key Takeaways:
* On-premises solutions are ideal for geographically concentrated networks with minimal cloud adoption.
* SASE is better suited for hybrid work, cloud adoption, and distributed networks.
References:
* Palo Alto Networks SASE Overview
* On-Premises vs. SASE Deployment Guide
Add Comments
- Other Question (23q)
- Q1. What would make a customer choose an on-premises solution over a cloud-based SASE solution...
- Q2. What is the minimum configuration to stop a Cobalt Strike Malleable C2 attack inline and i...
- Q3. Which two actions should a systems engineer take when a customer is concerned about how to...
- Q4. What is used to stop a DNS-based threat?
- Q5. Which three tools can a prospective customer use to evaluate Palo Alto Networks products t...
- Q6. Which three known variables can assist with sizing an NGFW appliance? (Choose three.)...
- Q7. Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)...
- Q8. A systems engineer (SE) successfully demonstrates NGFW managed by Strata Cloud Manager (SC...
- Q9. Regarding APIs, a customer RFP states: "The vendor's firewall solution must provide an API...
- Q10. A customer has acquired 10 new branch offices, each with fewer than 50 users and no existi...
- Q11. When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploit...
- Q12. While responding to a customer RFP, a systems engineer (SE) is presented the question, "Ho...
- Q13. Which two statements clarify the functionality and purchase options for Palo Alto Networks...
- Q14. There are no Advanced Threat Prevention log events in a company's SIEM instance. However, ...
- Q15. Which technique is an example of a DNS attack that Advanced DNS Security can detect and pr...
- Q16. Which action can help alleviate a prospective customer's concerns about transitioning from...
- Q17. A prospective customer has provided specific requirements for an upcoming firewall purchas...
- Q18. A security engineer has been tasked with protecting a company's on-premises web servers bu...
- Q19. A systems engineer (SE) is working with a customer that is fully cloud-deployed for all ap...
- Q20. Which three descriptions apply to a perimeter firewall? (Choose three.)...
- Q21. Which statement applies to the default configuration of a Palo Alto Networks NGFW?...
- Q22. A company plans to deploy identity for improved visibility and identity-based controls for...
- Q23. In addition to Advanced DNS Security, which three Cloud-Delivered Security Services (CDSS)...

[×]
Download PDF File
Enter your email address to download PaloAltoNetworks.PSE-Strata-Pro-24.v2025-05-24.q23.pdf