Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Palo Alto Networks logo

Palo Alto NetworksCertified Security Service Edge Engineer

Domain 2Objective 4

2.4 Configure and Implement User-Based Policies Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 1)

Part of the Prisma Access Services domain, which accounts for 22% of the SECURITY-SERVICE-EDGE-ENGINEER exam.

29questions here
6free pages
8concepts
22%of the exam

Questions 1–5

  1. 1application · medium

    An administrator has configured Cloud Identity Engine to sync users from Azure AD. The sync is successful, but some users are not appearing in the Cloud Identity Engine user list. The administrator has verified that the users are active in Azure AD and have the correct licenses. What is the most likely cause?

    Select an answer first
  2. 2application · medium

    An organization is integrating Prisma Access with Okta for identity-based policies. They have configured the directory integration and set up a synchronization schedule. However, after a new employee is added to Okta, the user cannot access the internet through Prisma Access, and the user does not appear in the Cloud Identity Engine user list. What is the most likely cause?

    Select an answer first
  3. 3expert · hard

    A company has a terminal server environment where multiple users log in to the same server. They want to enforce user-based policies in Prisma Access for the traffic originating from the terminal server. They have deployed the terminal services agent. However, the policies are not matching correctly. What is the most likely issue?

    Select an answer first
  4. 4application · medium

    An administrator has configured Cloud Identity Engine to sync users and groups from Azure AD. They want to enforce a policy that blocks access to a specific SaaS application for the 'Contractors' group. They have created the security policy rule in Prisma Access, but it is not matching any traffic. What is the most likely reason?

    Select an answer first
  5. 5foundation · medium

    Which of the following is a supported directory integration method for Cloud Identity Engine?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-SERVICE-EDGE-ENGINEER” is a trademark of its owner, used for identification only.