Câu 4: NetSec-Architect: Palo Alto Networks Network Security Architect

A global organization has fully adopted Prisma Access to provide security for its mobile workforce and remote offices, and user identity is managed in Okta. The security team wants to create consistent Security policies that grant access to specific SaaS applications based on a users' departments, regardless of whether they work from home or a from branch office connected via an SD-WAN deviceWhich architecture ensures that consistent user-to-group mapping is available to Prisma Access for policy enforcement in this use case?

1. A. Install the Palo Alto Networks User-ID agent and configure it to sync user information from Okta to Prisma Access
2. B. Deploy Panorama to manage Prisma Access and configure it to pull user and group information from Okta via the Cloud Identity Engine — đáp án hiện tại
3. C. Configure SAML federation between Prisma Access and Okta to provide user identity for every web request
4. D. Configure each remote office SD-WAN device and each user’s GlobalProtect client to query Okta directly for user information