1.7 Configure and Implement Identity Authentication Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is implementing SAML authentication for Prisma Access using a third-party identity provider. The administrator has configured the SAML SSO profile and uploaded the IdP metadata. Users can authenticate successfully, but the security team wants to enforce policies based on the user's department, which is available as an attribute in the identity provider. Which configuration should the administrator implement?

   • AConfigure a RADIUS server to provide department information.
   • BConfigure attribute mapping in Cloud Identity Engine to associate the SAML department attribute with a user attribute.
   • CConfigure Kerberos authentication to provide department information.
   • DConfigure a local user database in Prisma Access and manually assign departments.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company is deploying Prisma Access for remote users who connect from both domain-joined laptops and personal devices. The security team wants to use Kerberos authentication for domain-joined laptops to provide seamless access, but personal devices cannot obtain Kerberos tickets. The administrator needs to support both types of devices while maintaining a single authentication configuration in Prisma Access. Which approach should the administrator take?

   • AConfigure Kerberos authentication as the primary method and enable a fallback authentication method for personal devices.
   • BConfigure SAML authentication for all users and disable Kerberos.
   • CConfigure LDAP authentication for all users and disable Kerberos.
   • DConfigure certificate-based authentication for all users and disable Kerberos.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What configuration settings are typically required when setting up RADIUS authentication for Prisma Access?

   • AThe user's certificate and private key
   • BThe RADIUS server's IP address, shared secret, and authentication port
   • CThe directory server's base DN and bind credentials
   • DThe identity provider's metadata URL
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When configuring LDAP authentication for Prisma Access, what information is typically required?

   • AThe user's email address and password
   • BThe IP address of the Prisma Access gateway
   • CThe certificate authority's public key
   • DThe directory server's address, port, and bind credentials
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a SAML authentication configuration for Prisma Access, what is the role of the identity provider (IdP)?

   • ATo provide the IP address of the Prisma Access gateway
   • BTo store the user's password in Prisma Access
   • CTo generate and validate the user's authentication assertion
   • DTo encrypt the user's traffic after authentication
   Reveal Solution Discussion Select an answer first