Palo Alto Networks Certified Security Service Edge Engineer Free Sample Questions

When using the Strata Logging Service, log forwarding is configured centrally within the SCM settings, not via security policy rules like in Panorama. The correct method is to navigate to the logging service configuration, create a specific rule for the desired log type (DNS), and direct it to the appropriate external destination (the SIEM). The other options describe methods used in Panorama-managed firewalls or are conceptually incorrect.

Prisma Access Browser (PAB) is the agentless solution designed for this use case. Remote Browser Isolation (RBI) streams a visual representation of the web application to the user's browser, completely isolating the session from the endpoint and internal network. Enterprise DLP policies applied within PAB can enforce granular controls like disabling copy-paste and printing, directly addressing the data exfiltration concern.

App Acceleration is a feature specifically designed to improve the performance of latency-sensitive applications, with pre-defined optimizations for common SaaS applications like Microsoft 365. It uses techniques on the Prisma Access backbone to reduce latency and improve the user experience. While QoS can prioritize traffic, App Acceleration provides a more direct and effective solution for performance optimization of supported applications.

Backbone routing is the mechanism that directs traffic between different Prisma Access locations (like from a Security Processing Node handling a remote network to another handling a service connection) over the high-speed, private Palo Alto Networks global backbone. This avoids transiting the public internet, providing better performance and security, which is exactly what the scenario requires.

True. The ZTNA Connector provides a simplified and secure way to connect private applications to Prisma Access without requiring traditional network-level connectivity like IPSec tunnels (service connections). The connector establishes an outbound-only TLS tunnel to the Prisma Access cloud, effectively replacing the need for a service connection for the specific applications it serves.

For dynamic routing with remote networks, the standard and scalable method is to establish an eBGP peering session over the IPSec tunnel. This allows the branch CPE to advertise its local subnets to Prisma Access and learn routes from the rest of the SASE fabric (like data center subnets learned via service connections) automatically. Static routing is not scalable for 500 sites. iBGP is typically used within the same autonomous system, whereas eBGP is correct for peering between the customer site and Prisma Access.

The Best Practice Assessment (BPA) tool flags configurations that deviate from recommended security postures. A decryption profile set to 'no decrypt' and applied to a security policy means that encrypted traffic matching that rule is not being inspected for threats. This significantly reduces security visibility. The best practice is to enable SSL Forward Proxy decryption to inspect outbound SSL/TLS traffic for threats.

The Cloud Identity Engine is the component that integrates with cloud-based identity providers like Azure AD to pull user and group mapping information. SAML is the protocol used for the authentication and authorization exchange with the IdP.

AI Access Security is the purpose-built service within Prisma Access for discovering, securing, and controlling the use of generative AI applications. It can identify hundreds of AI tools, allow administrators to set granular policies (e.g., allow/block specific tools, control data uploads, log prompts), and prevent data leakage, directly addressing all the stated requirements.

Autonomous Digital Experience Management (ADEM) is the service that provides detailed visibility into the user's digital experience. It can trace the path from the user's endpoint, across their local network, the internet, and the Prisma Access infrastructure all the way to the application. It provides performance metrics for each segment, making it the ideal tool for diagnosing intermittent connectivity and performance issues.