Palo Alto Networks System Engineer – SASE — Question 63

A net new customer has a hard requirement for Active Directory Groups while looking for an SSE solution in order to create policies against a group of users, as opposed to individual users.

Without external hardware, what will enable group mappings to be accomplished with Prisma Access natively?

Answer options

• A. Authentication profiles
• B. User correlation profiles
• C. User-ID
• D. Cloud Identity Engine

Correct answer: D

Explanation

The correct answer is D, Cloud Identity Engine, which allows for native integration with Active Directory Groups for group mapping in Prisma Access. The other options, such as Authentication profiles, User correlation profiles, and User-ID, do not provide the same capability for managing group-based policies without external hardware.