3.3 Recommend Cloud Identity Engine Directory Sync Options NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How does the on-premises agent synchronize directory data to Cloud Identity Engine?

   • AIt reads directory changes and sends them securely to Cloud Identity Engine over an outbound connection
   • BIt replicates the directory to a local cache that Cloud Identity Engine accesses via VPN
   • CIt allows Cloud Identity Engine to directly query the on-premises directory over the internet
   • DIt pushes the entire directory database as a single file on a schedule
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key advantage of using a cloud directory integration over an on-premises agent?

   • AIt requires no configuration or permissions
   • BIt provides faster synchronization than any on-premises agent
   • CIt works with any directory source, including on-premises AD
   • DIt eliminates the need to deploy and maintain an on-premises component
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is deploying the on-premises agent for Cloud Identity Engine in a high-availability configuration. They have two domain controllers in the same site. What is the recommended way to configure the agent for redundancy?

   • AInstall one agent on a domain controller and enable the built-in failover feature.
   • BInstall two agents, each pointing to a different domain controller, and configure both in Cloud Identity Engine.
   • CInstall one agent and configure it to sync from both domain controllers simultaneously.
   • DInstall one agent and configure it to use a virtual IP address that load-balances between the two domain controllers.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What type of data does the on-premises agent typically synchronize to Cloud Identity Engine?

   • ALog files and traffic captures
   • BCertificates and private keys
   • CUser and group objects along with their attributes
   • DFirewall configuration and security policies
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   In a SAML 2.0 flow, what is the role of the identity provider (IdP)?

   • AIt authenticates the user and provides an assertion to the service provider
   • BIt stores the user's password in plaintext
   • CIt synchronizes directory data to the cloud
   • DIt receives the SAML assertion and grants access to the resource
   Reveal Solution Discussion Select an answer first