NGFW-ENGINEER · Question #92
NGFW-ENGINEER Question #92: Real Exam Question with Answer & Explanation
Sign in or unlock NGFW-ENGINEER to reveal the answer and full explanation for question #92. The question stem and answer options stay visible for context.
Question
A large organization has separate production and development environments, each with its own set of firewalls managed by Panorama. The organization uses Cloud Identity Engine (CIE) to consolidate user identities from Active Directory (AD) and Okta. A security mandate requires that development firewalls must only learn about "DEV" and "QA" user groups, while production firewalls should only see "Prod" user groups. How can an administrator enforce this separation using CIE with minimal complexity?
Options
- ACreate two segments, one with only "DEV" and "QA" groups, and one with "Prod" groups
- BRedistribute all user and group information to all firewalls and use Panorama Device Group
- CCreate filters using CLI commands to filter "Prod," "DEV," and "QA" groups.
- DConfigure two separate CIE instances, one for production and the other for development. Sync
Unlock NGFW-ENGINEER to see the answer
You've previewed enough free NGFW-ENGINEER questions. Unlock NGFW-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.