Palo Alto Networks SSE Engineer — Question 13

A company has a Prisma Access deployment for mobile users in North America and Europe. Service connections are deployed to the data centers on these continents, and the data centers are connected by private links.
With default routing mode, which action will verify that traffic being delivered to mobile users traverses the service connection in the appropriate regions?

Answer options

• A. Configure BGP on the customer premises equipment (CPE) to prefer the assigned community string attribute on the mobile user prefixes in its respective Prisma Access region.
• B. Configure each service connection to filter out the mobile user pool prefixes from the other region in the advertisements to the data center.
• C. Configure BGP on the customer premises equipment (CPE) to prefer the MED attribute on the mobile user prefixes in its respective Prisma Access region.
• D. Configure each service connection to prepend the BGP ASN five times for mobile user pool prefixes originating from the other region.

Correct answer: B

Explanation

The correct answer is B because filtering out the mobile user pool prefixes from the other region ensures that the advertisements to the data center only contain relevant prefixes, guiding traffic through the appropriate service connection. Options A and C involve BGP attributes that do not specifically address the need for regional traffic separation, while option D focuses on modifying ASN without solving the core issue of traffic direction.