Free Palo Alto Networks SSE-Engineer Actual Exam Questions - Question 9 Discussion
onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the
engineer selects the “Overlapping Subnets” checkbox.
Which Remote Network flow is supported after onboarding in this scenario?
It’s A for sure. Since all stores share the same subnet, routing between them would cause conflicts, so direct remote network flow (C) is out. Internet flow (B) might be possible but typically isn’t affected by subnet overlap in this context. Mobile users (D) don’t really connect through these remote networks. Checking the “Overlapping Subnets” box mainly allows access to private applications despite IP overlap, so A fits best here.
A. Overlapping subnets block routing but still allow private app access.
Maybe D makes less sense since mobile users aren’t part of the remote network setup here. Overlapping subnets usually block direct remote network or internet routing because the IPs collide, so B and C seem unlikely. That leaves A, where traffic to private applications inside Prisma Access is allowed despite overlapping subnets. So probably A is the best fit since it aligns with how Prisma Access handles these overlapping remote networks.
A. Overlapping subnets allow access to private apps but not direct routing between stores, so flow to private applications is the only supported one here.
A, because overlapping subnets block routing between stores but still allow private app access.
A imo, overlapping subnets usually mean you can't route directly between remote networks without conflicts, so traffic to private apps makes more sense here than routing between stores.
C