3.6 Evaluate Cloud Identity Engine Use Cases NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium · select all that apply

   A company has 4,000 remote users who connect via Prisma Access. They use Okta as their identity provider. The security team wants to enforce user-based policies for remote users. They also want to see which user is associated with each connection in the firewall logs. Which of the following are benefits of using Cloud Identity Engine in this scenario? (Select all that apply.)

   • AProvides real-time authentication for every remote connection.
   • BEnables user identification in firewall logs for remote connections.
   • CEliminates the need for on-premises identity infrastructure.
   • DProvides user and group information from Okta to Prisma Access for policy enforcement.
   • EAutomatically creates user accounts in the Prisma Access local database.
   Check answers Discussion Select an answer first
2. 2foundation · easy

   What capability does Cloud Identity Engine add to Prisma SD-WAN?

   • AIt provides a backup internet connection for branch offices
   • BIt provides identity-based segmentation and policy enforcement for branch networks
   • CIt automatically optimizes WAN bandwidth based on application usage
   • DIt replaces the need for any firewall in the branch office
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a key benefit of using Cloud Identity Engine with Prisma Access?

   • AIt provides a dedicated physical firewall for each remote user
   • BIt enables consistent identity-based access control for remote users across all locations
   • CIt automatically creates VPN tunnels for remote users
   • DIt eliminates the need for any user authentication when accessing cloud resources
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does Cloud Identity Engine enhance user identification for an NGFW beyond traditional methods?

   • ABy using machine learning to predict user behavior and block suspicious activity
   • BBy requiring users to authenticate to the firewall every time they access a new application
   • CBy replacing the firewall's security policies with cloud-based rules
   • DBy collecting identity data from multiple sources and correlating it to user and group mappings
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A retail company has 50 branch offices connected via Prisma SD-WAN. Each branch has a local NGFW. The company uses Google Workspace as its identity provider. They want to segment branch network access based on user groups (e.g., finance, HR, guest) and enforce the same policies across all branches. They want to avoid configuring user mapping on each individual branch firewall. What is the most efficient way to achieve this?

   • AUse Prisma SD-WAN's built-in user database and manually create user groups for each branch.
   • BDeploy a RADIUS server at each branch to authenticate users and map them to VLANs.
   • CIntegrate Cloud Identity Engine with Google Workspace and configure Prisma SD-WAN and the branch NGFWs to use Cloud Identity Engine for identity-based policy enforcement.
   • DConfigure each branch NGFW to connect directly to Google Workspace via LDAP and create local user groups on each device.
   Reveal Solution Discussion Select an answer first