4.4 Explain the Integration of Prisma SD-WAN with Cloud Identity Engine (CIE) SD-WAN-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a prerequisite for integrating Prisma SD-WAN with Cloud Identity Engine?

   • AA dedicated physical server for each branch office to run CIE
   • BA public IP address on every SD-WAN appliance
   • CA directory service (such as Active Directory) that can be synchronized to CIE
   • DA third-party SIEM solution to forward logs to CIE
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which type of policy in Prisma SD-WAN can directly use user and group identity from Cloud Identity Engine?

   • AQuality of Service (QoS) policies that prioritize traffic
   • BSecurity policies that control access to applications and resources
   • CRouting policies that determine the best path for traffic
   • DLink bonding policies that combine multiple WAN links
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An administrator is configuring the integration between Prisma SD-WAN and Cloud Identity Engine. They have already created the CIE tenant and added the identity source. What is the next step in the integration configuration process?

   • ACreate the identity-based security policies before enabling the integration.
   • BInstall the Directory Sync Agent on every branch firewall.
   • CEnable the Cloud Identity Engine integration in the Prisma SD-WAN portal and map the identity source to the tenant.
   • DConfigure the branch firewalls to authenticate users against CIE directly.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A multinational company is using Prisma SD-WAN and wants to enforce data-loss-prevention (DLP) policies based on user roles. They have users in multiple regions, and their identity data is stored in different Active Directory forests. The company wants a single, centralized view of all user identities for policy enforcement. What is the primary benefit of integrating Prisma SD-WAN with Cloud Identity Engine in this scenario?

   • AIt automatically creates separate security zones for each user group.
   • BIt eliminates the need for any on-premises identity infrastructure, including Active Directory.
   • CIt replaces the Prisma SD-WAN branch firewall with a cloud-based firewall.
   • DIt provides a unified identity repository that aggregates users and groups from multiple identity sources for consistent policy enforcement.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An organization is planning to integrate Prisma SD-WAN with Cloud Identity Engine. They use Azure AD as their identity provider and have no on-premises Active Directory. What is a required prerequisite for this integration?

   • AA Cloud Identity Engine tenant with Azure AD configured as an identity source.
   • BAn on-premises Active Directory domain to bridge Azure AD and Prisma SD-WAN.
   • CA Directory Sync Agent installed on a server with access to Azure AD.
   • DA site-to-site VPN between the branch offices and Azure AD.
   Reveal Solution Discussion Select an answer first