Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)

Question

Options

• AZoning must be configured to require a user ID for the mobile users trust zone.
• BMapping of trust and untrust zones must be configured.
• CBGP must be configured so that service connection networks can be advertised to the mobile
• DMobile user subnet and DNS portal name must be configured.

• A
  81% (26)
• B
  6% (2)
• C
  13% (4)

Explanation

To onboard Prisma Access mobile users, User-ID must be enabled for the mobile users trust zone (A) because Prisma Access relies on user identity to apply policy - without it, the system cannot map users to sessions. A mobile user subnet and DNS portal name (D) are also required because the subnet defines the IP pool assigned to mobile users, and the DNS portal name is what users connect to when authenticating through the GlobalProtect portal.

Why the distractors are wrong:

• B is incorrect - zone mapping of trust/untrust is a general network concept, not a specific prerequisite for mobile user onboarding in Prisma Access.
• C is incorrect - BGP and service connection advertisement apply to remote network (site) connectivity, not mobile user onboarding.

Memory tip: Think of mobile users needing an identity (User-ID in the trust zone) and an address (subnet + portal name) - you can't invite someone to a party without knowing who they are and where to send the invitation.

No community discussion yet for this question.