nerdexam
Palo_Alto_Networks

SSE-ENGINEER · Question #44

How can a network security team be granted full administrative access to a tenant's configuration while restricting access to other tenants by using role-based access control (RBAC) for Panorama…

The correct answer is A. Create an Access Domain and restrict access to only the Device Groups and Templates for the. In a Panorama Managed Prisma Access multitenant environment, Access Domains provide granular role-based access control (RBAC). By defining an Access Domain, the network security team can be granted full administrative privileges for a specific tenant's configuration while…

Administer and Manage Prisma Access Multi-Tenancy

Question

How can a network security team be granted full administrative access to a tenant's configuration while restricting access to other tenants by using role-based access control (RBAC) for Panorama Managed Prisma Access in a multitenant environment?

Options

  • ACreate an Access Domain and restrict access to only the Device Groups and Templates for the
  • BCreate a custom role enabling all privileges within the specific tenant's scope and assign it to the
  • CCreate a custom role with Device Group and Template privileges and assign it to the security
  • DSet the administrative accounts for the security team to the "Superuser" role.

How the community answered

(25 responses)
  • A
    56% (14)
  • B
    4% (1)
  • C
    16% (4)
  • D
    24% (6)

Explanation

In a Panorama Managed Prisma Access multitenant environment, Access Domains provide granular role-based access control (RBAC). By defining an Access Domain, the network security team can be granted full administrative privileges for a specific tenant's configuration while ensuring they cannot access or modify other tenants. This method enforces proper segmentation and ensures compliance with multitenant security policies.

Topics

#RBAC#multitenant#Access Domain#Panorama Managed Prisma Access

Community Discussion

No community discussion yet for this question.

Full SSE-ENGINEER Practice