Palo Alto Networks SSE Engineer — Question 24

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
How can the engineer configure mobile users and branch locations to meet the requirements?

Answer options

• A. Use GlobalProtect and Remote Networks to filter internet traffic and provide access to data center resources using service connections.
• B. Use Explicit Proxy to filter internet traffic and provide access to data center resources using service connections.
• C. Use GlobalProtect to filter internet traffic and provide access to data center resources using service connections.
• D. Use Explicit Proxy and Remote Networks to filter internet traffic and provide access to data center resources using service connections.

Correct answer: A

Explanation

The correct answer is A because GlobalProtect combined with Remote Networks effectively provides the necessary internet filtering and access to both data center and branch location resources. Options B and C do not fully meet the requirements for branch location connectivity, while option D introduces unnecessary complexity without addressing the specific needs outlined.