Palo Alto Networks Certified Security Service Edge Engineer (Prisma Access SASE) Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B0

  ,C - User mapping learned from sources other thangateway authenticationcan cause intermittent access issues if it conflicts with the expected user identity used in HIP-based policies. If the firewall is associatingthe user with an outdated or incorrect mapping, traffic may not match the intended security policies, leading todenials by the Catch-All Deny rule. If thefirewall loses user mapping due to missed HIP report checks, the user may temporarily lose access to policies that require a validHost Information Profile (HIP)match. When the VPN connection is refreshed, the HIP check is re-initiated, restoring access until the issue repeats.