SSE-ENGINEER · Question #2
An intern is tasked with changing the Anti-Spyware Profile used for security rules defined in the GlobalProtect folder. All security rules are using the Default Prisma Profile. The intern reports that
The correct answer is C. Create a new profile, because default profile groups cannot be modified.. Palo Alto Networks best practices and the behavior of Strata Cloud Manager (SCM) dictate that predefined or default objects, including profile groups like "Default Prisma Profile," cannot be directly modified. These default objects serve as baseline configurations and are often l
Question
An intern is tasked with changing the Anti-Spyware Profile used for security rules defined in the GlobalProtect folder. All security rules are using the Default Prisma Profile. The intern reports that the options are greyed out and cannot be modified when selecting the Default Prisma Profile. Based on the image below, which action will allow the intern to make the required modifications?
Exhibit
Options
- ARequest edit access for the GlobalProtect scope.
- BChange the configuration scope to Prisma Access and modify the profile group.
- CCreate a new profile, because default profile groups cannot be modified.
- DModify the existing anti-spyware profile, because best-practice profiles cannot be removed from a
How the community answered
(29 responses)- B3% (1)
- C93% (27)
- D3% (1)
Explanation
Palo Alto Networks best practices and the behavior of Strata Cloud Manager (SCM) dictate that predefined or default objects, including profile groups like "Default Prisma Profile," cannot be directly modified. These default objects serve as baseline configurations and are often locked to prevent accidental or unintended changes that could impact the overall security posture. The intern's experience of the options being greyed out when selecting "Default Prisma Profile" is a direct indication of this immutability of default objects. Configure the new Profile Group: In this new profile group, the intern can select the desired Anti- Spyware Profile (which might be an existing custom profile or a new one they create). Modify Security Rules: The security rules currently using the "Default Prisma Profile" in the GlobalProtect folder need to be modified to use this newly created profile group.
Topics
Community Discussion
No community discussion yet for this question.