PSE-SASE practice test

1. Question 1 · 1

   A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic. Which recommendation should the Systems Engineer make to this customer?

   Choose one answer.

   • With the explicit proxy license add-on, set up GlobalProtect.
   • With the mobile user license, set up explicit proxy.
   • With the explicit proxy license, set up a service connection.
   • With the mobile user license, set up a corporate access node.

2. Question 2 · 1

   In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?

   Choose one answer.

   • Step 4: Create the Zero Trust Policy
   • Step 3: Architect a Zero Trust Network
   • Step 1: Define the Protect Surface
   • Step 5: Monitor and Maintain the Network

3. Question 3 · 1

   A company is looking for a new security solution to secure their workforce. They have 2,000 users distributed throughout the United States, Canada, and Europe. They have no physical offices, but do have four data centers deployed in AWS and GCP which host private applications. Their CIO wants to make sure the workforce can connect securely to both SaaS and private applications and ensure a good end user experience. Which licensing model would best fit this scenario?

   Choose one answer.

   • Local Enterprise
   • Worldwide Enterprise
   • Business
   • Business Premium

4. Question 4 · 1

   What does the combined Mobile Users and Remote Networks SKU include?

   Choose one answer.

   • One mobile user license AND 1 Mbps remote network bandwidth
   • One mobile user license OR 1 Mbps remote network bandwidth
   • One mobile user license with no Mbps remote bandwidth
   • One MBPS remote network bandwidth with no mobile user licenses

5. Question 5 · 1

   How does Prisma Access enhance visibility and control over SaaS applications?

   Choose one answer.

   • Through SaaS Security Posture Management (SSPM)
   • By employing Content Delivery Network (CDN) capabilities
   • Through centralized logging in Strata Logging Service
   • By using AIOps for SASE

6. Question 6 · 1

   Where can the health of an application for monitored users be found?

   Choose one answer.

   • Dashboards --> Application Health
   • Incidents & Alerts --> Log Viewer --> Application Experience Score
   • Incidents & Alerts --> Log Viewer --> Application Health
   • Insights --> SD-WAN Applications

7. Question 7 · 1

   When licensing Prisma Access, how many service connections are standard with Business Premium?

   Choose one answer.

   • 0
   • 1
   • 2
   • 5

8. Question 8 · 1

   In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

   Choose one answer.

   • License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.
   • License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.
   • License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.
   • License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

9. Question 9 · 1

   A current Prisma SASE customer has recently onboarded several new SaaS applications, and they are concerned about their security posture regarding administrative settings. The IT team does not have experience with these applications, and is unsure what the best base security settings would be. Which product would fit the customer's needs?

   Choose one answer.

   • IoT Security
   • Prisma SD-WAN
   • SSPM
   • SaaS Security

10. Question 10 · 1

    Which three decryption methods are available in a security processing node (SPN)? (Choose three.)

    Choose all answers that apply.

    • SSL Outbound Proxy
    • SSHv2 Proxy
    • SSL Forward Proxy
    • SSL Inbound Inspection
    • SSH Inbound Inspection

11. Question 11 · 1

    A prospective Prisma Access customer has a requirement to allow their remote developers access to their local branch offices. Which add-on is needed to allow users to branch office access?

    Choose one answer.

    • GlobalProtect
    • Explicit proxy
    • Next Generation CASB
    • Net Interconnect license

12. Question 12 · 1

    Which feature of Prisma SD-WAN helps reduce operational complexity?

    Choose one answer.

    • AIOps for SASE
    • URL Filtering
    • Auto VPN
    • SD-WAN Edge

13. Question 13 · 1

    Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?

    Choose one answer.

    • UDP Response Time (UDP-TRT)
    • Server Response Time (SRT)
    • Network Transfer Time (NTTn)
    • Round Trip Time (RTT)

14. Question 14 · 1

    Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)

    Choose all answers that apply.

    • Zoning must be configured to require a user ID for the mobile users trust zone.
    • Mapping of trust and untrust zones must be configured.
    • BGP must be configured so that service connection networks can be advertised to the mobile gateways.
    • Mobile user subnet and DNS portal name must be configured.

15. Question 15 · 1

    How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

    Choose one answer.

    • It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
    • It offers risk scoring, analytics, reporting, and Security policy rule authoring.
    • It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
    • It prevents credential theft by controlling sites to which users can submit their corporate credentials.

Paid access to all 81 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.