Free Palo Alto Networks SSE-Engineer Exam Dumps Questions & Answers

Which statement is valid in relation to certificates used for GlobalProtect and pre-logon?

• A.A public certificate authority (CA) must sign and validate all certificates used.
• B.The certificate used for pre-logon must include both Subject and Subject-Alt fields.
• C.Certificates must be deployed in the Machine Certificate Store.
• D.The GlobalProtect agent may be used to distribute pre-logon certificates.

When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?

• A.Panorama
• B.Strata Cloud Manager (SCM)
• C.Specified internal security appliance
• D.Dedicated cloud storage location

An intern is tasked with changing the Anti-Spyware Profile used for security rules defined in the GlobalProtect folder. All security rules are using the Default Prisma Profile. The intern reports that the options are greyed out and cannot be modified when selecting the Default Prisma Profile.
Based on the image below, which action will allow the intern to make the required modifications?

• A.Change the configuration scope to Prisma Access and modify the profile group.
• B.Create a new profile, because default profile groups cannot be modified.
• C.Request edit access for the GlobalProtect scope.
• D.Modify the existing anti-spyware profile, because best-practice profiles cannot be removed from a group.

How can a network security team be granted full administrative access to a tenant's configuration while restricting access to other tenants by using role-based access control (RBAC) for Panorama Managed Prisma Access in a multitenant environment?

• A.Create a custom role enabling all privileges within the specific tenant's scope and assign it to the security team's user accounts.
• B.Create a custom role with Device Group and Template privileges and assign it to the security team's user accounts.
• C.Set the administrative accounts for the security team to the "Superuser" role.
• D.Create an Access Domain and restrict access to only the Device Groups and Templates for the Target Tenant.

Which two configurations must be enabled to allow App Acceleration for SaaS applications? (Choose two.)

• A.Forward Trust Certificate for the CA certificate
• B.QoS for user traffic
• C.Acceleration agent for the client machines
• D.Trusted Root CA for the CA certificate