In Cloud Identity Engine, what is the relationship between a directory group and a policy group?

Directory groups are used only for authentication, not for policies

A directory group is mapped to a policy group to enable its use in policies

A policy group is automatically created for every directory group

Policy groups replace directory groups in the identity provider

A company uses Prisma Access with Cloud Identity Engine. They have a security policy that allows 'Engineering' group to access a code repository, but blocks all other users. An engineer is being blocked. The user is correctly synced and mapped to the 'Engineering' group in Cloud Identity Engine. What should the administrator check next?

The user's device is compliant with the company's security policy.

The code repository is accessible from the user's network.

The security policy rule is placed above any deny rules.

The user's IP address is mapped to the user identity in Prisma Access.

Palo Alto NetworksCertified Security Service Edge Engineer

Domain 2Objective 4

2.4 Configure and Implement User-Based Policies Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 3)

Part of the Prisma Access Services domain, which accounts for 22% of the SECURITY-SERVICE-EDGE-ENGINEER exam.

29questions here

6free pages

8concepts

22%of the exam

Questions 11–15

11foundation · medium
Which User-ID collection method is specifically designed to map users to IP addresses in a terminal server or VDI environment?
Select an answer first
12foundation · medium
In Cloud Identity Engine, what is the relationship between a directory group and a policy group?
Select an answer first
13application · medium
A company uses Prisma Access with Cloud Identity Engine. They have a security policy that allows 'Engineering' group to access a code repository, but blocks all other users. An engineer is being blocked. The user is correctly synced and mapped to the 'Engineering' group in Cloud Identity Engine. What should the administrator check next?
Select an answer first
14application · medium
An organization uses a third-party identity management system that can provide user-to-IP mappings via an API. They want to integrate this with Prisma Access to enforce user-based policies. Which User-ID collection method should they use?
Select an answer first
15application · medium
A company has a terminal server that employees use to access the internet. The terminal server is in a remote office and is not domain-joined. They want to enforce user-based policies in Prisma Access for the users on the terminal server. Which User-ID collection method should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-SERVICE-EDGE-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-SERVICE-EDGE-ENGINEER” is a trademark of its owner, used for identification only.

2.4 Configure and Implement User-Based Policies Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 3)

Questions 11–15

Which User-ID collection method is specifically designed to map users to IP addresses in a terminal server or VDI environment?

In Cloud Identity Engine, what is the relationship between a directory group and a policy group?

An organization uses a third-party identity management system that can provide user-to-IP mappings via an API. They want to integrate this with Prisma Access to enforce user-based policies. Which User-ID collection method should they use?

A company has a terminal server that employees use to access the internet. The terminal server is in a remote office and is not domain-joined. They want to enforce user-based policies in Prisma Access for the users on the terminal server. Which User-ID collection method should they use?

Keep studying — Prisma Access Services