4.4 Explain the Integration of Prisma SD-WAN with Cloud Identity Engine (CIE) SD-WAN-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   After configuring the CIE integration in Prisma SD-WAN, what is the next step to verify that the integration is working?

   • AContact support to confirm the integration is active
   • BCreate a new user in the local directory to test synchronization
   • CReboot all SD-WAN appliances to force a reconnection
   • DCheck the integration status in the Prisma SD-WAN portal to confirm it is connected and synchronized
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   After integrating Prisma SD-WAN with Cloud Identity Engine, an administrator notices that user identity is not appearing in the Prisma SD-WAN policy match logs. The CIE portal shows the identity source is 'Connected' and the sync agent is running. What is the most likely cause of this issue?

   • AThe users are not logging in through the captive portal on the branch firewall.
   • BThe branch firewalls are not configured to send user authentication traffic to CIE.
   • CThe identity source in CIE has not been assigned to the Prisma SD-WAN tenant or the integration was not enabled in Prisma SD-WAN.
   • DThe Active Directory domain controllers are not reachable from the Prisma SD-WAN branch firewalls.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which benefit does integrating Prisma SD-WAN with Cloud Identity Engine provide to an organization?

   • AIt enables consistent identity-based policy enforcement across the SD-WAN, regardless of user location or device
   • BIt eliminates the need for any other security products in the network
   • CIt automatically optimizes WAN links based on real-time traffic patterns
   • DIt provides a backup internet connection for all branch offices
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An administrator has configured the integration between Prisma SD-WAN and Cloud Identity Engine. The integration is enabled, and the identity source is mapped. However, the administrator notices that the 'Engineering' group is not appearing in the Prisma SD-WAN policy configuration. The group exists in Active Directory and is visible in CIE. What is the most likely cause?

   • AThe Prisma SD-WAN policy configuration only shows groups that are explicitly added to a policy.
   • BThe group name contains special characters that are not supported by Prisma SD-WAN.
   • CThe group has not been synchronized to CIE yet, or the sync agent has not completed a full sync.
   • DThe group is a distribution group, not a security group.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has integrated Prisma SD-WAN with Cloud Identity Engine. They have a policy that allows the 'Sales' group to access a CRM application. Recently, a new user was added to the 'Sales' group in Active Directory. The user reports that they cannot access the CRM application. The administrator confirms that the user is a member of the 'Sales' group in AD. What is the most likely reason the user's access is not working?

   • AThe user's IP address is not in the policy's source address range.
   • BThe policy is applied to the wrong branch firewall.
   • CThe sync agent has not yet synchronized the group membership change to CIE.
   • DThe CRM application is not defined in the Prisma SD-WAN application database.
   Reveal Solution Discussion Select an answer first