SSE-Engineer 무료 덤프문제 온라인 액세스

A user connected to Prisma Access reports that traffic intermittently is denied after matching a Catch-All Deny rule at the bottom and bypassing HIP-based policies. Refreshing VPN connection restores the access.
What are two reasons for this behavior? (Choose two.)

• A.HIP-enforced policy is scheduled for certain hours of the day.
• B.User mapping is learned from sources other than gateway authentication.
• C.Firewall loses user mapping due to missed HIP report checks.
• D." Collect HIP data " needs to be enabled in the configuration.

An engineer has configured IPSec tunnels for two remote network locations; however, users are experiencing intermittent connectivity issues across the tunnels. What action will allow the engineer to receive notifications when the IPSec tunnels are down or experiencing instability?

• A.Set up the operational health dashboard to email alerts for remote Network IPSec tunnel issues.
• B.Select the IPSec tunnel monitoring and notifications checkbox when configuring the remote network IPSec tunnels.
• C.Create a new notification profile specifying conditions for remote network IPSec tunnel conditions.
• D.Create a tunnel log notification rule to alert on specified remote network IPSec tunnel conditions.

Which advanced AI-powered functionality does Strata Copilot provide to enhance the capabilities of Prisma Access security teams?

• A.Customized guidance for resolving issues through recommended next steps
• B.Automated remediation of misconfigured security policies
• C.Initial configuration of Prisma Access using a natural language interface
• D.Real-time traffic analysis for automated threat prevention

Which configuration change will allow an organization using Prisma Access (Managed by Panorama) to minimize the consumption of Strata Logging Service storage due to a high volume of asymmetric traffic flows on its data center?

• A.Reduce the log retention period for Strata Logging Service.
• B.Disable the log forwarding profile for the service connection.
• C.Disable traffic logging on the service connection.
• D.Configure a log forwarding profile on the service connection to filter out asymmetric traffic.

What is the network impact when a Prisma Access service connection is set as a dedicated service connection for traffic steering?

• A.It changes its zone to Untrust, applies source NAT to forwarded traffic, and no longer participates in BGP routing.
• B.It maintains its zone as Trust and continues to participate in both internal and external BGP routing.
• C.It maintains its zone as Trust; however, it disables all Security policies, allowing unrestricted traffic flow through the dedicated service connection.
• D.It applies destination NAT to forwarded traffic, maintains its BGP routing configurations, and allows traffic from both Trust and Untrust zones.