Discuss Palo Alto Networks SSE-Engineer Exam Topic 3 Question 24

A company is using Prisma Access with Cloud Identity Engine for user-based policies. Which two system configurations will dynamically grant users access to specific projects based on their group membership in Microsoft Entra ID? (Choose two.)

AConfigure Dynamic Privilege Access settings in Prisma Access and associate the user groups with the corresponding project IP address pools.

BCreate a custom application in Microsoft Entra ID representing each project and configure SSO with the Cloud Identity Engine.

CImplement an authentication sequence in Prisma Access that prioritizes Cloud Identity Engine authentication for users belonging to project-specific groups.

DIn the Cloud Identity Engine, add the Microsoft Entra ID directory as an IdP and configure the required user group mappings for each project.

Suggested Answer: A, D

Get Premium SSE-Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Vonda 1 month ago

C seems important. Prioritizing authentication is key for security.

Rochell 1 month ago

I lean towards A too. Privilege access settings make sense.

Lavonda 1 month ago

I think D is a solid choice. Group mappings are crucial.

Desmond 2 months ago

I disagree, I feel like C should be included as well.

Jaime 2 months ago

Totally agree with A and D! Makes sense for project access.

Pilar 2 months ago

Wait, can you really do that with just group membership? Sounds too simple.

Fabiola 2 months ago

I think B could work too, but not sure it's dynamic access.

Gregoria 2 months ago

A and D are the right choices!

Avery 2 months ago

I’m a bit confused about option A; I don’t recall the specifics of Dynamic Privilege Access settings. Was that covered in our practice questions?

Andra 3 months ago

I feel like option C could be correct since we practiced prioritizing authentication methods for different user groups.

Lorean 3 months ago

I'm not entirely sure, but I remember something about configuring user group mappings in relation to access control.

Trina 3 months ago

I think option D sounds familiar because we talked about integrating identity providers in our last study session.

Palo Alto Networks SSE-Engineer Exam - Topic 3 Question 24 Discussion