A company uses LDAP as its directory source for Cloud Identity Engine. They notice that user group memberships are not updating in Prisma Access even though the LDAP directory is correct. The synchronization schedule is set to run every hour. What should the administrator check first?

Verify that the LDAP server is reachable from Cloud Identity Engine and that the bind credentials have read access to the group attributes.

Change the synchronization schedule to run every 15 minutes.

Configure a captive portal to force users to re-authenticate and refresh group membership.

Ensure that the User-ID agent is installed on the LDAP server.

Which troubleshooting step is most appropriate when Cloud Identity Engine is not synchronizing groups correctly?

Verify the directory integration credentials and synchronization schedule

What is the purpose of mapping directory groups to Prisma Access policy groups?

To use group membership in security policy rules

To assign IP addresses to users

Palo Alto NetworksCertified Security Service Edge Engineer

Domain 2Objective 4

2.4 Configure and Implement User-Based Policies Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Part of the Prisma Access Services domain, which accounts for 22% of the SECURITY-SERVICE-EDGE-ENGINEER exam.

29questions here

6free pages

8concepts

22%of the exam

Questions 16–20

16foundation · medium
Which of the following is a key component of setting up authentication in Cloud Identity Engine?
Select an answer first
17application · medium
A company uses LDAP as its directory source for Cloud Identity Engine. They notice that user group memberships are not updating in Prisma Access even though the LDAP directory is correct. The synchronization schedule is set to run every hour. What should the administrator check first?
Select an answer first
18foundation · medium
Which User-ID collection method is used to identify users who are not domain-joined or are accessing the network through a web portal?
Select an answer first
19foundation · medium
Which troubleshooting step is most appropriate when Cloud Identity Engine is not synchronizing groups correctly?
Select an answer first
20foundation · medium
What is the purpose of mapping directory groups to Prisma Access policy groups?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-SERVICE-EDGE-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “SECURITY-SERVICE-EDGE-ENGINEER” is a trademark of its owner, used for identification only.

2.4 Configure and Implement User-Based Policies Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Questions 16–20

Which of the following is a key component of setting up authentication in Cloud Identity Engine?

A company uses LDAP as its directory source for Cloud Identity Engine. They notice that user group memberships are not updating in Prisma Access even though the LDAP directory is correct. The synchronization schedule is set to run every hour. What should the administrator check first?

Which User-ID collection method is used to identify users who are not domain-joined or are accessing the network through a web portal?

Which troubleshooting step is most appropriate when Cloud Identity Engine is not synchronizing groups correctly?

What is the purpose of mapping directory groups to Prisma Access policy groups?

Keep studying — Prisma Access Services