Q: 4
When configuring Remote Browser Isolation (RBI) with Prisma Access (Managed by Strata Cloud Manager), which element is required to define the protected URLs for mobile users?
Options
Discussion
Option A is correct here. D tempts you because the policy applies isolation, but for defining protected URLs specifically you need that URL access management profile. Seen similar wording on practice sets.
A
Pretty sure A, the URL access management profile is what actually defines which URLs get isolation for RBI.
Actually I don't think D is correct for "defining" protected URLs, that's just how you enforce it. Seen similar wording in some practice Qs and A is where you set which URLs to isolate. D tries to trick you but for this wording, A.
A tbh, the actual list of protected URLs for RBI gets set in the URL access management profile, not in the policy itself. You apply that to your Security policy after, so D would only be part of enforcement. That's how it shows up in Strata docs. Anyone else disagree?
Probably A - the URL access management profile is where you actually specify which sites get isolated for RBI. D is a common trap since it's about enforcement, not definition. Pretty sure exam questions split 'define' and 'enforce' steps like this, but correct me if I'm missing something.
Yeah it's A since the URL access management profile is where you actually list the protected URLs to be isolated. Policy (D) enforces it, but A defines them. Pretty sure that's how it works with Prisma Access configs, anyone disagree?
Maybe D flips if the question said 'enforce' instead of 'define', since policy config handles the action.
Isn't the official material pretty clear that URL access management profiles are where you specify isolation for RBI? Labs and guides both highlight this step, so practice with them if you're not sure about the config details.
Always gets confusing with Palo Alto's wording on profiles vs policy. But for actually defining the protected URLs, it's A since the URL access management profile is where you specify what gets isolated. If I'm wrong, someone let me know.
Be respectful. No spam.