Home Certifications Editorials

Exam overview and study plan

SSE Engineer 270-393 Practice Questions

Security Service Edge (SSE) Engineer

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 63 free questions

63 questions in this view

Page 1 of 11

Question 1

How can the Prisma Browser Extension extend an organization's web security posture to managed devices that are not connected to a VPN for browser-based access to company-sanctioned web applications?

It enforces consistent web access and data control policies directly within the browser, regardless of device management status.
It tunnels all endpoint traffic on unmanaged devices, ensuring all device traffic is secured.
It optimizes network performance for browser traffic to Prisma Access for all operating systems and browsers.
It incorporates Remote Browser Isolation (RBI) for the endpoint, running web sessions in a contained environment on any browser.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A security engineer is troubleshooting an issue in which mobile users intermittently lose access to protected resources. The traffic logs show that sessions are being dropped by a Deny-All rule, despite the users meeting the criteria for a host information profile (HIP)-enabled policy. Re-establishing the GlobalProtect connection temporarily resolves the issue.

What are two causes for intermittent policy bypass? (Choose two.)

The Security policy containing the HIP object has an active schedule that limits access to business hours.
The firewall is receiving user mapping information from sources other than GlobalProtect gateway.
The firewall loses the user-to-IP mapping because of missed HIP report intervals.
The "Collect HIP Data" option is disabled in the GlobalProtect portal configuration.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

To minimize the attack surface, an organization has replaced traditional VPNs with Prisma Browser. A developer now requires SSH access to an internal Linux host.

Which two configurations are mandatory for the developer to access this application? (Choose two.)

Configure a Remote Connection Application and an Access & Data Control policy rule.
Install the SSH Proxy Extension on the developer's local machine.
Activate the "Remote Connections" toggle under Administration.
Configure the host as a Private Web Application with an SSH prefix in the URL.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

An organization uses Strata Cloud Manager (SCM) to manage a multitenant Prisma Access deployment. To maintain strict isolation, an administrator wants to grant a group of users full control over the security rules of a single Marketing Tenant without giving them any permissions at the root level.

How should the engineer configure this access?

Create a custom role at the Parent level that includes a Tenant-Match condition for the Marketing department.
Assign the users to the Global Tenant and apply a security profile that limits the users' access to the Marketing IP address range.
Add the users to the Parent Tenant and select the Marketing Tenant as the specific Configuration Scope.
Add the users to the Child Tenant account, select "Prisma Access & NGFW Configuration," and assign the Security Administrator role.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A network administrator is configuring Prisma Browser policies to enhance web security and wants to ensure that search engine results presented to users are filtered for explicit content by the search engines.

Which security feature of Prisma Browser enforces this behavior?

Web access permissions for the Prisma Browser Extension to restrict access to adult websites
Safe Search functionality within a URL Filtering policy
Search Engine Content Filtering to reduce exposure to adult content
Access & Data Control rule to block adult website classification

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Which authentication protocol is supported for Prisma Access explicit proxy using a PAC file?

Kerberos
LDAP
Radius
SAML

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 11

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.