Palo Alto Networks SSE Engineer — Question 25

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
Which two options will allow the engineer to support the requirements? (Choose two.)

Answer options

• A. Configure the CPE with Static Routes pointing to Prisma Access Infrastructure and Mobile User routes.
• B. Enable eBGP for dynamic routing and configure RemoteNetworks.
• C. Configure Remote Networks and define the branch IP subnets using Static Routes.
• D. Enable Remote Networks Advertise Default Route.

Correct answer: B, D

Explanation

Option B is correct because enabling eBGP allows for dynamic routing, which is essential for supporting multiple connections like mobile users and branch locations. Option D is also correct as it ensures that Remote Networks can advertise a default route, which is necessary for directing traffic appropriately. Options A and C do not provide the required dynamic routing capabilities for the specified needs.