PSE-SASE Sample Questions Answers

It applies configuration changes and provides credential management, role-based controls, and a playbook repository.

It provides customized forms to collect and validate necessary parameters from the requester.

It natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost of legacy security products attempting to solve the problem.

It provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data to provide the most complete picture of user traffic flows possible.

Identity Access Management (IAM) methods

Firewall as a Service (FWaaS)

Instant-On Network (ION) devices

Cloud Access Security Broker (CASB)

summary overview screen of the health and performance of an organization's entire Prisma Access environment

configuration of the on-premises firewall located behind the service-connection termination

detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data

multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Cloud Identity Engine (CIE)

DNS Security

security information and event management (SIEM)

Device Insights

It stops attacks that use DNS for command and control or data theft.

It feeds threat intelligence into an automation engine for rapid and consistent protections.

It classifies sites based on content, features, and safety.

It continuously validates every stage of a digital interaction.

manual external gateway

secure web gateway (SWG)

GlobalProtect VPN for remote access

Prisma Access Clientless VPN

decreased likelihood of a data breach

reduced input required from management during third-party investigations

decreased need for interaction between branches

reduced number of security incidents requiring manual investigation

The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.

The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.

Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.

It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.

automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices

utilization of near real-time analysis to detect previously unseen, targeted malware and advanced persistent threats

identification of port-based rules so they can be converted to application-based rules without compromising application availability

configuration of the authentication source once instead of for each authentication method used

GlobalProtect

Broker VM

explicit proxy

system-wide proxy

path analysis

playbooks

ticketing systems

inspections

It enables definition of the privileges and responsibilities of administrative users in a network.

It allows configuration to forward logs to external logging destinations, such as syslog servers.

It steers traffic and defines networking and security policies from an application-centric perspective, rather than a packet-based approach.

It provides the ability to push common configurations, configuration updates, and software upgrades to all or a subset of the managed appliances.

A heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

It prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

Protection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

It creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Zero Trust

threat prevention

single-pass architecture (SPA)

DNS Security

It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.

It offers risk scoring, analytics, reporting, and Security policy rule authoring.

It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.

It prevents credential theft by controlling sites to which users can submit their corporate credentials.

Administrator can allocate up to 120% of the total bandwidth purchased for aggregate locations to support traffic peaks.

Administrator must assign a minimum of 50 MB to any compute location that will support remote networks.

Administrator is not required to allocate all purchased bandwidth to compute locations for the configuration to be valid.

Bandwidth that is allocated to a compute location is statically and evenly distributed across remote networks in that location.