nerdexam
Palo_Alto_Networks

SSE-ENGINEER · Question #1

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer…

The correct answer is A. To private applications. When the "Overlapping Subnets" checkbox is selected during the Remote Network onboarding process in Prisma Access, the deployment enables Private Application access using Prisma Access for Users (ZTNA or Private Access). This feature is designed to handle scenarios where…

Remote Network Configuration

Question

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer selects the "Overlapping Subnets" checkbox. Which Remote Network flow is supported after onboarding in this scenario?

Options

  • ATo private applications
  • BTo the internet
  • CTo remote network
  • DTo mobile users

How the community answered

(33 responses)
  • A
    73% (24)
  • B
    3% (1)
  • C
    18% (6)
  • D
    6% (2)

Explanation

When the "Overlapping Subnets" checkbox is selected during the Remote Network onboarding process in Prisma Access, the deployment enables Private Application access using Prisma Access for Users (ZTNA or Private Access). This feature is designed to handle scenarios where multiple sites use the same IP subnet by leveraging NAT (Network Address Translation) and segmentation to avoid conflicts. Since overlapping subnets can create routing challenges for direct remote network-to-remote network communication, Prisma Access does not support Remote Network-to-Remote Network or Mobile User communication in this case. Private application access is supported as Prisma Access correctly routes requests based on application-layer intelligence rather than IP-based

Topics

#overlapping subnets#Remote Networks#Prisma Access#traffic flow

Community Discussion

No community discussion yet for this question.

Full SSE-ENGINEER Practice