An engineer deploys a new branch connected to Prisma Access. From the customer premises equipment (CPE) device at the branch, Phase 1 on the tunnel is established, but Phase 2-encrypted packets are not coming back from Prisma Access. Which Strata Logging Service log facility should the engineer review to determine why Phase 2-encrypted traffic is not being received?

• A. Decrypt logs
• B. Traffic logs
• C. Tunnel logs
• D. System logs

An organization deploys the Prisma Access Browser (PAB) to secure web access from diverse endpoints, including personal devices where IT has limited control. To maintain a strong and proactive security posture across these varied environments, why is the use of PAB device posture attributes, such as OS version, file system encryption, and device type, considered essential?

• A. It permits PAB to function as a standalone endpoint detection and response (EDR) solution.
• B. It enables the administrators of PAB to independently perform OS and browser patching on unmanaged devices.
• C. It allows administrators to identify and restrict access based on OS version and browser type on unmanaged devices.
• D. It provides the administrators of PAB the ability to enable disk encryption on all endpoints.

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to their data centers. The solution must meet these requirements: The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations. The branch locations must have internet filtering and data center connectivity. The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports. The security team must have access to manage the mobile user and access to branch locations. The network team must have access to manage only the partner access. Which two components can be provisioned to enable data center connectivity over the internet? (Choose two answers)

• A. SD-WAN Connector
• B. ZTNA Connector
• C. Colo-Connect
• D. Service connections

Which Cloud Identity Engine capability will create a Security policy that uses Entra ID attributes as the source identification?

• A. Cloud Dynamic User Group
• B. Attribute Group Mapping
• C. Entra ID Cloud Group
• D. Entra ID Group Attribute

Which statement applies when enabling multitenancy in Prisma Access (Managed by Panorama)?

• A. There is flexibility to manage different tenants using separate Panoramas, which allows for better organization and management of the multiple tenants.
• B. Each tenant is allocated its own dedicated Prisma Access instances, with compute resources that are not shared across tenants.
• C. A single tenant cannot consist solely of mobile users or solely of remote networks.
• D. Service connection licenses will be assigned only to the first tenant, and these service connections can be shared with the other tenants.