View all questions & answers for the Palo Alto Security Service Edge Engineer Exam Materials exam


Question 62 Discussion

Which two configurations will enable multiple paths from the MU-SPN to different SC-CAN elements inside the backplane of the Prisma Access tenant? (Choose two answers)

  • A. Strata Cloud Managed Tenants – Asymmetric Routing with Load Sharing
  • B. Strata Cloud Managed Tenants – Asymmetric Routing with Load Sharing and enable Mobile User Network Redundancy
  • C. Panorama Managed Tenants – Asymmetric Routing with Load Sharing and enable Mobile User Network Redundancy
  • D. Panorama Managed Tenants – Asymmetric Routing with Load Sharing
Correct Answer: A,D

Brave-Dump Clients Votes

AC 100%

Comments



Ayesha 2026-03-07 02:25:01

Selected Answers: A, C


To enable multiple paths from Mobile User Security Processing Nodes (MU-SPN) to different Service Connection Corporate Access Node (SC-CAN) elements within the Prisma Access tenant backplane, two distinct configurations are required, depending on whether the tenant is managed by Strata Cloud Manager or Panorama.

The configurations are:

Strata Cloud Managed Tenants - Asymmetric Routing with Load Sharing

For Cloud Managed deployments, enabling "Allow asymmetric routing and load sharing across Service Connections" in the Backbone Routing options automatically enables network redundancy between mobile user dataplanes and service connections in different compute locations, providing redundant network paths .

This is configured by navigating to Manage > Service Setup > Service Connections > Advanced Settings and setting the Backbone Routing option to Allow asymmetric routing and load sharing across Service Connections .

Panorama Managed Tenants - Asymmetric Routing with Load Sharing and enable Mobile User Network Redundancy

For Panorama Managed deployments, two steps are necessary:

First, enable "asymmetric routing and load sharing across service connections" in the Backbone Routing options. This is done by navigating to Panorama > Cloud Services > Configuration > Service Setup, clicking the gear icon to edit settings, and in the Advanced tab, setting the Backbone Routing option to asymmetric-routing-with-load-share .

Second, explicitly enable network redundancy for mobile users. This is configured by selecting Panorama > Cloud Services > Configuration > Mobile Users—GlobalProtect, choosing the relevant Hostname, and in the General tab, selecting Enable Network Redundancy .

These two configurations ensure that mobile users have resilient access to resources behind service connections in a data center or headquarters location by providing redundant network paths.