3.2 Architect Strata Cloud Manager (SCM), Strata Logging Service, and Cloud Identity Engine NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which benefit is achieved by integrating Cloud Identity Engine with Strata Cloud Manager and Strata Logging Service?

   • AAdministrative access to SCM is simplified by using firewall credentials.
   • BSecurity policies can be based on user and group identity, and logs can be correlated with user activity.
   • CLog storage is reduced because only identity logs are kept.
   • DFirewall performance is improved by reducing the need for security policies.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security team wants to create a policy that blocks access to a sensitive application for users in the 'Contractors' group. They have SCM, SLS, and CIE integrated. What is the correct sequence of steps to implement this policy?

   • ACreate the policy in CIE and push it to SCM.
   • BCreate a security policy in SCM that references the 'Contractors' group from CIE, and ensure logs are sent to SLS for visibility.
   • CCreate the policy on each firewall individually using the group from CIE.
   • DCreate the policy in SLS and apply it to the firewalls.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the role of Cloud Identity Engine (CIE) in an SCM-managed environment?

   • ATo store and forward firewall logs to external SIEM systems
   • BTo manage firewall software licenses and subscriptions
   • CTo provide user and group identity information for policy enforcement
   • DTo provide a cloud-based firewall for internet traffic
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which integration is typically used with Cloud Identity Engine to obtain user and group information?

   • AIdentity providers such as Microsoft Entra ID or Okta
   • BStrata Cloud Manager device groups
   • CStrata Logging Service for log correlation
   • DFirewall interfaces for user authentication
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which statement accurately describes the architecture of Strata Cloud Manager (SCM)?

   • ASCM is a firewall plugin that runs directly on each managed firewall to provide local policy management.
   • BSCM is an on-premises virtual appliance that must be deployed in each data center to manage local firewalls.
   • CSCM is a cloud-delivered management platform that centralizes configuration, policy, and device management for Palo Alto Networks firewalls and Prisma Access.
   • DSCM is a logging service that only collects logs from firewalls and does not manage configuration.
   Reveal Solution Discussion Select an answer first