An organization uses Microsoft Entra ID and wants to strictly enforce a requirement that remote users accessing highly sensitive SaaS applications can only do so when originating from Prisma Browser. Which unique identifier must be configured within the Entra ID Conditional Access policy to effectively confirm and enforce that the access request is specifically originating from Prisma Browser and preventing standard web browsers from circumventing the Zero Trust Network Access (ZTNA) control?

• A. Unique device token or Device-ID issued by Prisma Browser and validated by Entra ID
• B. Certificate thumbprint of Prisma Browser's secure workspace key used for session encryption
• C. List of known egress IP addresses associated with Prisma Browser's cloud proxy infrastructure
• D. GlobalProtect mobile application installed on the user's endpoint

An enterprise needs to identify users accessing applications without relying on IP addresses.
Which feature should be used?

• A. NAT
• B. Content-ID
• C. User-ID
• D. App-ID

A company wants automated response to detected threats. What should they implement?

• A. SOAR integration
• B. Manual response
• C. Static rules only
• D. Disable alerts

A multinational organization has a large worldwide remote user base. This user base consists of several persona types with distinct requirements and concerns regarding the adoption of a Zero Trust Network Access (ZTNA) solution.
- Developers have a requirement to temporarily bypass security controls for business purposes, but the security team sees this as a potential risk. The developers commonly access development servers onsite in private data centers and public cloud. These development applications use web (HTTP/HTTPS), API, RPC, and SMB-based applications.
- Sales staff travel regularly and connect to the network via many different types of connections, but they are generally limited to SaaS-based web applications. They often complain about performance when any agent is installed and want the ability to temporarily disable these agents.
Data exfiltration and insider risk have been identified as the primary threats for this class of user.
- Executives have concerns about being high-value targets. Security must be consistent across the multiple endpoint types, including mobile and desktop devices. The executive team members have indicated that their primary objective is to ensure that the solution is responsive and easy to troubleshoot.
Which statement applies in the context of securing the developers' applications?

• A. ZTNA Connector requires DNS for all applications it publishes and does not permit direct IP address-based access
• B. Explicit proxy on ramps can only provide security for HTTP, HTTPS, and proxy-aware applications
• C. Mobile users, remote networks, and explicit proxy all provide the same Cloud-Delivered Security Services (CDSS) capabilities.
• D. GlobalProtect mobile users and explicit proxy users share the same configuration scope for policy configuration