Free Palo Alto Networks SSE-Engineer Exam Questions

Become Palo Alto Networks Certified with updated SSE-Engineer exam questions and correct answers

Page: 1 / 10

Total 50 Questions | Updated On: Oct 27, 2025

Add To Cart

Question 1

A user connected to Prisma Access reports that traffic intermittently is denied after matching a Catch-All Deny rule at the bottom and bypassing HIP-based policies. Refreshing VPN connection restores the access. What are two reasons for this behavior? (Choose two.)

A : "Collect HIP data' needs to be enabled in the configuration.

B : User mapping is learned from sources other than gateway authentication.

C : Firewall loses user mapping due to missed HIP report checks.

D : HIP-enforced policy is scheduled for certain hours of the day.

Answer: B,C

Question 2

What must be configured to accurately report an application's availability when onboarding a discovered application for ZTNA Connector?

A : icmp ping

B : https ping

C : tcp ping

D : udp ping

Answer: C

Question 3

Which feature within Strata Cloud Manager (SCM) allows an operations team to view applications, threats, and user insights for branch locations for both NGFW and Prisma Access simultaneously?

A : Command Center

B : Log Viewer

C : Branch Site Monitor

D : SASE Health Dashboard

Answer: A

Question 4

Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)

A : The client is misconfigured.

B : Create a do not decrypt rule for the hostname œgoogle.com.

C : The server has pinned certificates.

D : Create a do not decrypt rule for the hostname œcertificates.godaddy.com.