A large financial firm considering purchasing Prisma Access has recently hired 300 remote contractors who will bring their own devices to work. For that reason, the firm cannot mandate a client or…

Question

Options

• AService connections
• BExplicit Proxy
• CGlobalProtect
• DClientless VPN

• A
  14% (5)
• B
  78% (29)
• C
  8% (3)

Explanation

Explicit Proxy (B) and Clientless VPN (D) are correct because both methods work without installing dedicated software. Explicit Proxy routes web traffic through Prisma Access by configuring proxy settings that are natively supported in all modern browsers - no agent required. Clientless VPN provides a browser-based portal that contractors can access from any device with a standard web browser, giving them secure access without a VPN client installation.

Why the distractors are wrong:

• GlobalProtect (C) requires a dedicated VPN client agent installed on the endpoint - precisely what the firm cannot mandate on contractor BYOD devices.
• Service connections (A) are used to link Prisma Access infrastructure back to the organization's data center or HQ network; they are not a remote user access method at all.

Memory tip: When you see "no client, no browser mandate" in a Prisma Access question, think agentless - Explicit Proxy hijacks existing browser proxy settings, and Clientless VPN gives you a browser portal. Both skip the agent entirely. GlobalProtect = agent required, Service connections = site-to-site plumbing.

No community discussion yet for this question.