Palo Alto Networks SSE Engineer — Question 12

Which two actions can a company with Prisma Access deployed take to use the Egress IP API to automate policy rule updates when the IP addresses used by Prisma Access change? (Choose two.)

Answer options

• A. Configure a webhook to receive notifications of IP address changes.
• B. Copy the Egress IP API Key in the service infrastructure settings.
• C. Enable the Egress IP API endpoint in Prisma Access.
• D. Download a client certificate to authenticate to the Egress IP API.

Correct answer: A, B

Explanation

The correct answers are A and B. Configuring a webhook allows the company to receive real-time notifications about IP changes, facilitating timely updates. Copying the Egress IP API Key is necessary for authentication in service infrastructure settings to enable secure API access. Options C and D are not required for automating the policy updates with the Egress IP API.