NGFW-ENGINEER · Question #26
NGFW-ENGINEER Question #26: Real Exam Question with Answer & Explanation
Sign in or unlock NGFW-ENGINEER to reveal the answer and full explanation for question #26. The question stem and answer options stay visible for context.
Question
A multinational organization wants to use the Cloud Identity Engine (CIE) to aggregate identity data from multiple sources (on premises AD, Azure AD, Okta) while enforcing strict data isolation for different regional business units. Each region's firewalls, managed via Panorama, must only receive the user and group information relevant to that region. The organization aims to minimize administrative overhead while meeting data sovereignty requirements. Which approach achieves this segmentation of identity data?
Options
- ACreate one CIE tenant, aggregate all identity data into a single view, and redistribute the full
- BEstablish separate CIE tenants for each business unit, integrating each tenant with the relevant
- CDisable redistribution of identity data entirely. Instead, configure each regional firewall to pull user
- DDeploy a single CIE tenant that collects all identity data, then configure segments within the
Unlock NGFW-ENGINEER to see the answer
You've previewed enough free NGFW-ENGINEER questions. Unlock NGFW-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.