Free Preparation Discussions
MENU
Palo Alto Networks Exam NGFW-Engineer Topic 2 Question 4 Discussion
Topic #: 2
A multinational organization wants to use the Cloud Identity Engine (CIE) to aggregate identity data from multiple sources (on premises AD, Azure AD, Okta) while enforcing strict data isolation for different regional business units. Each region's firewalls, managed via Panorama, must only receive the user and group information relevant to that region. The organization aims to minimize administrative overhead while meeting data sovereignty requirements.
Which approach achieves this segmentation of identity data?
To meet the requirement of data isolation for different regional business units while minimizing administrative overhead, the best approach is to establish separate Cloud Identity Engine (CIE) tenants for each business unit. Each tenant would be integrated with the relevant identity sources (such as on-premises AD, Azure AD, and Okta) for that specific region. This ensures that the identity data for each region is kept isolated and only relevant user and group data is distributed to the respective regional firewalls.
By maintaining a strict one-to-one mapping between CIE tenants and business units, the organization ensures that each region's firewall only receives the user and group data relevant to that region, thus meeting data sovereignty requirements and minimizing administrative complexity.
Carlota
22 days agoAlex
23 days agoLuann
1 months agoJaleesa
2 days agoAdela
4 days agoKeena
10 days agoRasheeda
22 days agoPamella
1 months agoValentine
1 months agoShonda
2 months agoEleonore
22 days agoTammara
27 days agoVanesa
2 months agoSamira
12 hours agoJulio
2 days agoPaulene
22 days agoEdison
29 days agoNu
1 months agoZona
1 months agoDevora
1 months agoBeata
1 months agoPamella
2 months ago