An organization with offices throughout the world has an SD-WAN solution in which all traffic is backhauled to a central set of data centers. Many of the offices have IoT / OT devices. Which IoT Security requirement must be taken into consideration by the security architect when determining which Zero Trust network solution will help this organization evolve its security architecture?

• A. The organization must have local NGFW for enforcement.
• B. All DHCP requests must traverse the Prisma SD-WAN fabric for IoT / OT detection.
• C. A local sensor must be deployed as either an agent on the DHCP server or as a container on the virtual infrastructure.
• D. Either a Prisma SD-WAN ION or an NGFW device must be present for accurate IoT / OT detection.

A global organization has fully adopted Prisma Access to provide security for its mobile workforce and remote offices, and user identity is managed in Okta. The security team wants to create consistent Security policies that grant access to specific SaaS applications based on a users' departments, regardless of whether they work from home or a from branch office connected via an SD-WAN device. Which architecture ensures that consistent user-to-group mapping is available to Prisma Access for policy enforcement in this use case?

• A. Configure SAML federation between Prisma Access and Okta to provide user identity for every web request
• B. Deploy Panorama to manage Prisma Access and configure it to pull user and group information from Okta via the Cloud Identity Engine
• C. Configure each remote office SD-WAN device and each user's GlobalProtect client to query Okta directly for user information
• D. Install the Palo Alto Networks User-ID agent and configure it to sync user information from Okta to Prisma Access

A security architect needs to design a log collection architecture for a large organization with hundreds of firewalls distributed across multiple geographic regions. The primary requirement is to ensure that if a single Log Collector in any region fails, logs from the firewalls in that region will automatically be sent to another available Log Collector without manual intervention. What is the recommended Panorama feature to achieve this level of log collection resilience?

• A. Storage capacity increase on each individual Log Collector
• B. Log Collector Group for each geographic region
• C. Log Collectors deployed in a high availability (HA) pair
• D. Load balancer to distribute logs across all Log Collectors

An organization is in the process of building a network infrastructure that is cloud first. Part of the revised architecture includes Prisma Access as demonstrated in the diagram below. The organization has selected Strata Cloud Manager (SCM) as the management method for Prisma Access and NGFWs deployed at the data center and in public cloud environments. There are 150 NGFWs in place that are used to terminate service connections and segment networks as well as to secure the data center and public cloud resources.

One of the resilience requirements is to provide highly available directory services and authentication for the NGFW and Prisma Access deployment.
Which two configurations meet the design and customer requirements in this scenario? (Choose two.)

• A. Firewalls and Prisma Access connected to the Cloud Identity Engine with connections to Entra ID for directory services
• B. Firewalls connected to LDAP servers and Prisma Access connected to the Cloud Identity Engine with connections to the LDAP servers for directory services
• C. Firewalls and Prisma Access for mobile users with RADIUS authentication
• D. Firewalls and Prisma Access for mobile users configured with SAML authentication