SSE-Engineer Practice Test practice questions, page 3 of 3, with answer review and explanations.
Question 11
Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)
The client is misconfigured.
Create a do not decrypt rule for the hostname “google.com.”
The server has pinned certificates.
Create a do not decrypt rule for the hostname “certificates.godaddy.com.”
Question 12
How can a network security team be granted full administrative access to a tenant's configuration while restricting access to other tenants by using role-based access control (RBAC) for Panorama Managed Prisma Access in a multitenant environment?
Create an Access Domain and restrict access to only the Device Groups and Templates for the Target Tenant.
Create a custom role enabling all privileges within the specific tenant’s scope and assign it to the security team’s user accounts.
Create a custom role with Device Group and Template privileges and assign it to the security team’s user accounts.
Set the administrative accounts for the security team to the “Superuser” role.
Question 13
An engineer has configured a Web Security rule that restricts access to certain web applications for a specific user group. During testing, the rule does not take effect as expected, and the users can still access blocked web applications. What is a reason for this issue?
The rule was created with improper threat management settings.
The rule was created in the wrong scope, affecting only GlobalProtect users instead of all users.
The rule was created at a higher level in the rule hierarchy, giving priority to a lower-level rule.
The rule was created at a lower level in the rule hierarchy, giving priority to a higher-level rule.