Palo Alto Networks Exam SSE-Engineer Topic 3 Question 1 Discussion

Actual exam question for Palo Alto Networks's SSE-Engineer exam

Question #: 1
Topic #: 3

What must be configured to accurately report an application's availability when onboarding a discovered application for ZTNA Connector?

Aicmp ping

Bhttps ping

Ctcp ping

Dudp ping

Show Suggested Answer

Suggested Answer: C

When onboarding a discovered application for ZTNA Connector, configuring a TCP ping allows Prisma Access to accurately report the application's availability. TCP ping (also known as a TCP connection check) verifies whether the application's service port is open and responsive, ensuring that the application is reachable before allowing user connections. This method is more reliable than ICMP ping, as many cloud and SaaS applications block ICMP traffic for security reasons.

by Stefan at May 01, 2025, 10:24 PM

Limited Time Offer

25%

1 months ago

I think option C is the way to go. TCP ping is the most reliable way to check an app's availability.

upvoted 0 times

Thurman

1 days ago

I think I would go with option B, https ping.

upvoted 0 times

...

Corinne

26 days ago

I agree, TCP ping is definitely the most reliable option.

upvoted 0 times

...