Palo Alto Networks SSE Engineer — Question 23

Which Cloud Identity Engine capability will create a Security policy that uses Entra ID attributes as the source identification?

Answer options

• A. Entra ID Group Attribute
• B. Attribute Group Mapping
• C. Entra ID Cloud Group
• D. Cloud Dynamic User Group

Correct answer: D

Explanation

The correct answer is D, as the Cloud Dynamic User Group feature enables the creation of dynamic groups based on Entra ID attributes, which are essential for implementing security policies. The other options, while related to Entra ID, do not provide the same capability for dynamic group creation based on attributes.