4.4 Explain the Integration of Prisma SD-WAN with Cloud Identity Engine (CIE) SD-WAN-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is a common issue that can prevent Prisma SD-WAN from successfully integrating with Cloud Identity Engine?

   • AThe organization uses a private cloud for its directory services
   • BThe SD-WAN appliance does not have a GPS antenna
   • CIncorrect credentials or API keys entered during the integration setup
   • DThe branch office does not have a local DNS server
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An administrator has successfully integrated Prisma SD-WAN with Cloud Identity Engine. They now want to create a policy that allows the 'Engineering' group to access a specific SaaS application while blocking all other users. In the Prisma SD-WAN policy configuration, where should the administrator reference the 'Engineering' group?

   • AIn the action field of the security policy rule, setting the group as the action type.
   • BIn the application field of the security policy rule, selecting the group as an application.
   • CIn the source of the security policy rule, selecting the group from the identity-based source list.
   • DIn the destination of the security policy rule, specifying the group as the target.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A network administrator notices that Prisma SD-WAN is not receiving identity updates from Cloud Identity Engine. What is a common first step to troubleshoot this issue?

   • AReinstall the CIE connector on the local server
   • BCheck the physical cabling of the WAN links
   • CVerify that the directory synchronization in CIE is running and has no errors
   • DReboot the SD-WAN appliance at the branch office
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is evaluating whether to integrate Prisma SD-WAN with Cloud Identity Engine. Their current setup uses local user accounts on each branch firewall for policy enforcement. They are experiencing inconsistent policy enforcement across branches and high administrative overhead. What is a key benefit of integrating with CIE that addresses this issue?

   • AElimination of the need for any security policies in Prisma SD-WAN.
   • BCentralized identity management that ensures consistent user and group definitions across all branches.
   • CDirect integration with the branch firewall's local user database.
   • DAutomatic creation of site-specific security policies based on local user groups.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   In the Prisma SD-WAN portal, where would an administrator go to initiate the integration with Cloud Identity Engine?

   • AThe 'Alerts' section to review system notifications
   • BThe 'Network' section to configure a new site
   • CThe 'Device' section to manage appliance firmware
   • DThe 'Identity' or 'Cloud Identity Engine' section under Administration or Settings
   Reveal Solution Discussion Select an answer first