Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Palo Alto Networks SSE-Engineer Exam - Topic 3 Question 24 Discussion

A company is using Prisma Access with Cloud Identity Engine for user-based policies. Which two system configurations will dynamically grant users access to specific projects based on their group membership in Microsoft Entra ID? (Choose two.)
A) Configure Dynamic Privilege Access settings in Prisma Access and associate the user groups with the corresponding project IP address pools. and D) In the Cloud Identity Engine, add the Microsoft Entra ID directory as an IdP and configure the required user group mappings for each project.
B) Create a custom application in Microsoft Entra ID representing each project and configure SSO with the Cloud Identity Engine.
C) Implement an authentication sequence in Prisma Access that prioritizes Cloud Identity Engine authentication for users belonging to project-specific groups.

Palo Alto Networks SSE-Engineer Exam - Topic 3 Question 24 Discussion

Actual exam question for Palo Alto Networks's SSE-Engineer exam
Question #: 24
Topic #: 3
[All SSE-Engineer Questions]

A company is using Prisma Access with Cloud Identity Engine for user-based policies. Which two system configurations will dynamically grant users access to specific projects based on their group membership in Microsoft Entra ID? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, D

by Margart at Jul 22, 2026, 12:29 AM

Limited Time Offer

25%

Off

Get Premium SSE-Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Desmond
3 days ago
I disagree, I feel like C should be included as well.
upvoted 0 times
...
Jaime
8 days ago
Totally agree with A and D! Makes sense for project access.
upvoted 0 times
...
Pilar
13 days ago
Wait, can you really do that with just group membership? Sounds too simple.
upvoted 0 times
...
Fabiola
19 days ago
I think B could work too, but not sure it's dynamic access.
upvoted 0 times
...
Gregoria
24 days ago
A and D are the right choices!
upvoted 0 times
...
Avery
29 days ago
I’m a bit confused about option A; I don’t recall the specifics of Dynamic Privilege Access settings. Was that covered in our practice questions?
upvoted 0 times
...
Andra
1 month ago
I feel like option C could be correct since we practiced prioritizing authentication methods for different user groups.
upvoted 0 times
...
Lorean
1 month ago
I'm not entirely sure, but I remember something about configuring user group mappings in relation to access control.
upvoted 0 times
...
Trina
1 month ago
I think option D sounds familiar because we talked about integrating identity providers in our last study session.
upvoted 0 times
...

Save Cancel