A multinational organization wants to use the Cloud Identity Engine (CIE) to aggregate identity data from multiple sources (on premises AD, Azure AD, Okta) while enforcing strict data isolation for…

Question

Options

• ACreate one CIE tenant, aggregate all identity data into a single view, and redistribute the full
• BEstablish separate CIE tenants for each business unit, integrating each tenant with the relevant
• CDisable redistribution of identity data entirely. Instead, configure each regional firewall to pull user
• DDeploy a single CIE tenant that collects all identity data, then configure segments within the

• A
  14% (9)
• B
  75% (49)
• C
  8% (5)
• D
  3% (2)

Explanation

To meet the requirement of data isolation for different regional business units while minimizing administrative overhead, the best approach is to establish separate Cloud Identity Engine (CIE) tenants for each business unit. Each tenant would be integrated with the relevant identity sources (such as on-premises AD, Azure AD, and Okta) for that specific region. This ensures that the identity data for each region is kept isolated and only relevant user and group data is distributed to the respective regional firewalls. By maintaining a strict one-to-one mapping between CIE tenants and business units, the organization ensures that each region's firewall only receives the user and group data relevant to that region, thus meeting data sovereignty requirements and minimizing administrative

No community discussion yet for this question.