3.2 Architect Strata Cloud Manager (SCM), Strata Logging Service, and Cloud Identity Engine NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How do Strata Cloud Manager, Strata Logging Service, and Cloud Identity Engine work together to provide a unified security solution?

   • ASCM, SLS, and CIE are separate products that cannot be integrated.
   • BSCM manages policies, SLS provides centralized logging, and CIE supplies identity information for policy enforcement.
   • CSCM and SLS are interchangeable, and CIE is optional for all deployments.
   • DSCM provides logging, SLS manages policies, and CIE handles firewall updates.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In Strata Cloud Manager, what is the purpose of a device group?

   • ATo define network settings like IP addresses and routing for each firewall
   • BTo manage administrative access and user roles for SCM
   • CTo collect logs from firewalls and forward them to external systems
   • DTo group firewalls so that shared policies can be applied consistently across them
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator needs to deploy a new firewall and ensure it automatically receives the correct device group, template, and policy from SCM. What is the recommended way to onboard the firewall?

   • AConnect the firewall to the network and it will automatically discover SCM.
   • BUse a USB drive to load a configuration file that includes SCM connection details.
   • CUse the SCM bootstrap process to connect the firewall to SCM and assign it to the appropriate device group and template.
   • DManually configure the firewall with the same settings as an existing firewall and then register it with SCM.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization wants to use dynamic user groups in their security policies. These groups are defined based on attributes such as department or location, and are synchronized from their identity provider. What is required to use these dynamic groups in SCM policies?

   • AUse SLS to define dynamic groups based on log data.
   • BManually create the groups in SCM and add users to them.
   • CConfigure CIE to synchronize dynamic groups from the identity provider.
   • DUse templates to define dynamic groups.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company wants to enforce user-based policies on their firewalls using identity information from their on-premises Active Directory. They plan to use Cloud Identity Engine (CIE) with SCM. What must be configured to ensure the firewalls can resolve user identity for policy enforcement?

   • AConfigure CIE to connect to Active Directory and enable User-ID agent on the firewalls.
   • BUse SLS to collect identity information from AD and push it to the firewalls.
   • CInstall a User-ID agent on each firewall and configure it to connect to AD.
   • DConfigure SCM to directly query Active Directory for user identity.
   Reveal Solution Discussion Select an answer first