How does Prisma Access Traffic Replication support security monitoring?

Question

Options

• AIt duplicates traffic and forwards it to external monitoring tools
• BIt reroutes suspicious traffic to a secure data center for analysis
• CIt enforces additional decryption policies for threat detection
• DIt reduces bandwidth usage by compressing security logs

• A
  89% (31)
• B
  3% (1)
• C
  3% (1)
• D
  6% (2)

Explanation

Prisma Access Traffic Replication works by making a copy (duplicate) of network traffic and forwarding that copy to external security monitoring or analytics tools - such as SIEMs, packet analyzers, or threat detection platforms - without interrupting the original traffic flow. This allows security teams to inspect, analyze, and log traffic in parallel, making A correct.

Why the distractors are wrong:

• B is incorrect because Traffic Replication doesn't reroute or redirect suspicious traffic - it mirrors all traffic passively to monitoring tools, not selectively to a data center.
• C is incorrect because decryption policies are a separate feature (SSL/TLS inspection); Traffic Replication is about copying traffic, not enforcing decryption.
• D is incorrect because Traffic Replication actually increases data volume by duplicating traffic - it has nothing to do with compressing logs or saving bandwidth.

Memory tip: Think of Traffic Replication like a carbon copy (CC) on an email - the original message is delivered normally, but an identical copy goes to additional recipients (your monitoring tools) simultaneously.

No community discussion yet for this question.