Question 1

Which of the following best describes the primary function of Prisma Access in the Prisma SASE architecture?

Options :

A : Handling the detection and prevention of internal network threats

B : Offering secure access to cloud-based applications for remote users

C : Managing identity and access controls for on-premises resources

D : Providing a centralized firewall to control internal network traffic

Answer: B

Question 2

How does TLS ensure the confidentiality of the session key during the handshake process?

Options :

A : The session key is shared over an encrypted channel established by the server’s certificate.

B : The client sends the session key encrypted with the server’s private key.

C : The session key is pre-shared before the handshake begins.

D : The session key is derived independently by both parties using shared secrets.

Answer: D

Question 3

You are configuring a secure network architecture using Palo Alto Networks' Prisma SASE solution. Which of the following components is primarily responsible for providing secure internet access to branch offices and remote users while maintaining consistent security policies?

Options :

A : Prisma SD-WAN

B : Prisma Access

C : Cortex XDR

D : Prisma Cloud

Answer: B

Question 4

Which of the following characteristics is most commonly associated with spamming botnets?

Options :

A : They primarily perform brute force attacks to compromise user credentials.

B : They send large volumes of unsolicited emails or messages using compromised devices.

C : They mine cryptocurrency on compromised devices without the owner-s consent.

D : They generate fraudulent clicks on advertisements to increase revenue for attackers.

Answer: B

Question 5

An organization is experiencing suspicious activity on multiple endpoints. The security team needs to identify the root cause and the scope of the compromise by analyzing endpoint memory, processes, and file system changes. Which IR tool is the most appropriate for this task?

Options :

A : EDR (Endpoint Detection and Response)

B : SIEM (Security Information and Event Management)

C : Sandboxing Tool

D : DLP (Data Loss Prevention)

Answer: A