Valid SSE-Engineer Dumps shared by ExamDiscuss.com for Helping Passing SSE-Engineer Exam! ExamDiscuss.com now offer the newest SSE-Engineer exam dumps, the ExamDiscuss.com SSE-Engineer exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SSE-Engineer dumps with Test Engine here:
A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to their data centers. The solution must meet these requirements: The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations. The branch locations must have internet filtering and data center connectivity. The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports. The security team must have access to manage the mobile user and access to branch locations. The network team must have access to manage only the partner access. How should Prisma Access be implemented to meet the customer requirements?
Correct Answer: D
A single Prisma Access instance is sufficient here because the segmentation the customer needs - security team managing mobile users and branch locations, network team managing only partner access - is an administrative RBAC problem, not a data-plane isolation problem. Strata Cloud Manager ' s configuration scope model (Mobile Users, Remote Networks, Service Connections, and the parent Prisma Access scope) lets an administrator be granted access to only the folders relevant to their function, so the security team can be scoped to the Mobile Users and Remote Networks containers while the network team is scoped to the private application/service connection objects used for B2B access. Deploying two separate Prisma Access instances (options A and C) is operationally wasteful and unnecessary: it doubles licensing overhead, duplicates infrastructure subnets and service connections, and is a pattern reserved for genuine tenant isolation requirements (distinct compliance boundaries, MSSP customers, or M & A separation), not simple team- based access segmentation. Using the broad Prisma Access configuration scope for everyone (option B) collapses all administrative boundaries and violates least privilege, since it would let the network team touch mobile user and branch policy. Scoping RBAC to the specific configuration scope (Mobile Users, Remote Networks, or the private access/service connection objects) within one instance cleanly satisfies both the connectivity requirements and the separation-of-duties requirement. Reference:Strata Cloud Manager - Configuration Scope and Role-Based Access Control.
