Pass exam with SSE-Engineer Top Exam Collection for sure one-shot

How can an engineer use risk score customization in SaaS Security Inline to limit the use of unsanctioned SaaS applications by employees within a Security policy?

• A. Build an application filter using unsanctioned SaaS as the category.
• B. Lower the risk score of sanctioned applications and increase the risk score for unsanctioned applications.
• C. Increase the risk score for all SaaS applications to automatically block unwanted applications.
• D. Build an application filter using unsanctioned SaaS as the characteristic.

An organization deploys the Prisma Access Browser (PAB) to secure web access from diverse endpoints, including personal devices where IT has limited control. To maintain a strong and proactive security posture across these varied environments, why is the use of PAB device posture attributes, such as OS version, file system encryption, and device type, considered essential?

• A. It provides the administrators of PAB the ability to enable disk encryption on all endpoints.
• B. It allows administrators to identify and restrict access based on OS version and browser type on unmanaged devices.
• C. It permits PAB to function as a standalone endpoint detection and response (EDR) solution.
• D. It enables the administrators of PAB to independently perform OS and browser patching on unmanaged devices.

During a deployment of Prisma Access (Managed by Strata Cloud Manager) for mobile users, a SAML authentication type and authentication profile in the Cloud Identity Engine application is successfully created.
Using this SAML authentication, what is a valid next step to configure authentication for mobile users?

• A. Permit the Cloud Identity Engine service account RBAC access to the mobile user folder in Strata Cloud Manager.
• B. In Strata Cloud Manager, create a new authentication type of " Cloud Identity Engine. "
• C. Create a SAML authentication profile in Strata Cloud Manager and link it to the Cloud Identity Engine profile.
• D. Perform a full commit to Strata Cloud Manager so the Cloud Identity Engine profiles get synchronized from the application.

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to their data centers. [Same scenario as above.] Which two options will allow the engineer to support the requirements? (Choose two.)

• A. Configure Remote Networks and define the branch IP subnets using Static Routes.
• B. Enable eBGP for dynamic routing and configure Remote Networks.
• C. Enable Remote Networks Advertise Default Route.
• D. Configure the CPE with Static Routes pointing to Prisma Access Infrastructure and Mobile User routes.

An engineer deploys a new branch connected to Prisma Access. From the customer premises equipment (CPE) device at the branch, Phase 1 on the tunnel is established, but Phase 2-encrypted packets are not coming back from Prisma Access. Which Strata Logging Service log facility should the engineer review to determine why Phase 2-encrypted traffic is not being received?

• A. System logs
• B. Traffic logs
• C. Tunnel logs
• D. Decrypt logs