ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 296 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 296
Topic #: 1
[All PCNSE Questions]

A customer is replacing their legacy remote access VPN solution. The current solution is in place to secure only Internet egress for the connected clients. Prisma
Access has been selected to replace the current remote access VPN solution. During onboarding the following options and licenses were selected and enabled:
- Prisma Access for Remote Networks: 300Mbps
- Prisma Access for Mobile Users: 1500 Users
- Cortex Data Lake: 2TB
- Trusted Zones: trust
- Untrusted Zones: untrust
- Parent Device Group: shared
How can you configure Prisma Access to provide the same level of access as the current VPN solution?

  • A. Configure mobile users with trust-to-untrust Security policy rules to allow the desired traffic outbound to the Internet
  • B. Configure remote networks with a service connection and trust-to-untrust Security policy rules to allow the desired traffic outbound to the Internet
  • C. Configure remote networks with trust-to-trust Security policy rules to allow the desired traffic outbound to the Internet
  • D. Configure mobile users with a service connection and trust-to-trust Security policy rules to allow the desired traffic outbound to the Internet
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by guilhermeandrade at Oct. 27, 2022, 9:35 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Whizdhum
10 months, 3 weeks ago
Selected Answer: A
Answer is A. If the remote network location is autonomous and does not need to access to infrastructure at other locations, you do not need to set up the service connection (unless your mobile users need access).
upvoted 2 times
...
Sammy3637
11 months ago
Selected Answer: A
Outbound to internet cannot be a trust zone
upvoted 1 times
...
lol12
1 year, 10 months ago
Selected Answer: A
A Service connections are needed for access to DC and question is regarding Remote access to the internet
upvoted 3 times
duckduckgooo
1 year, 6 months ago
https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-for-users/plan-prisma-access-for-users#id1689f9f8-e528-4335-9436-2418582e8e80
upvoted 1 times
...
...
mz101
1 year, 11 months ago
Should be A. B includes "service connection", which is not necessary for egress Internet only access.
upvoted 2 times
...
Genesec
1 year, 11 months ago
Selected Answer: A
It is A
upvoted 1 times
...
confusion
2 years ago
Selected Answer: A
A MU-SPN is needed for Mobile Users
upvoted 1 times
...
guilhermeandrade
2 years ago
Selected Answer: B
I think is B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago