1.7 Configure and Implement Identity Authentication Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the role of a RADIUS server in Prisma Access authentication?

   • ATo issue tickets for Kerberos authentication
   • BTo provide a web portal for user self-service password reset
   • CTo synchronize user groups from the directory to Prisma Access
   • DTo verify user credentials and return an accept or reject response
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of configuring SAML authentication for Prisma Access?

   • ATo encrypt all traffic between the user and Prisma Access
   • BTo enable single sign-on by allowing users to authenticate against an external identity provider
   • CTo provide a backup authentication method if the primary directory is unavailable
   • DTo synchronize user groups from Active Directory to Prisma Access
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of certificate-based authentication in Prisma Access?

   • ATo encrypt the user's traffic using the certificate's public key
   • BTo authenticate users based on a digital certificate installed on their device
   • CTo synchronize user groups from a certificate authority
   • DTo provide a backup password for users who forget their credentials
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An organization is deploying Prisma Access and wants to use RADIUS authentication with their existing RADIUS server. The security team is concerned about the security of RADIUS traffic between Prisma Access and the RADIUS server. The administrator needs to ensure that authentication traffic is protected. Which configuration should the administrator implement?

   • AConfigure RADIUS authentication using a public key infrastructure for encryption.
   • BConfigure RADIUS authentication over a standard HTTP connection.
   • CConfigure RADIUS authentication with a shared secret and ensure the connection uses a secure transport method.
   • DConfigure RADIUS authentication without a shared secret to simplify the setup.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has an existing RADIUS infrastructure that authenticates users for network access. They are deploying Prisma Access and want to reuse the same RADIUS server for user authentication to maintain a consistent authentication experience. The security team also wants to enforce identity-based policies in Prisma Access. Which configuration should the administrator implement?

   • AConfigure SAML authentication using the RADIUS server as the identity provider.
   • BConfigure LDAP authentication to the RADIUS server's user database.
   • CConfigure RADIUS authentication in Prisma Access pointing to the existing RADIUS server and integrate with Cloud Identity Engine for user identity mapping.
   • DConfigure Kerberos authentication using the RADIUS server as the key distribution center.
   Reveal Solution Discussion Select an answer first