Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam

Access More Questions

An architect is designing User-ID at scale across 40 sites with mixed Active Directory, Azure AD, and contractor identities. Which approach minimizes IP-to-user mapping latency and avoids rogue mappings?

Run a single User-ID agent on one global domain controller and let firewalls poll over WAN Use a distributed Cloud Identity Engine deployment with Cedge-based agentless User-ID where supported, redundant User-ID agents per site, and Group Mapping via LDAP — feed Panorama with consistent group definitions Disable User-ID and rely solely on source IP rules Configure every firewall with WMI probing to all hosts on its connected subnets

Correct Answer:

Use a distributed Cloud Identity Engine deployment with Cedge-based agentless User-ID where supported, redundant User-ID agents per site, and Group Mapping via LDAP — feed Panorama with consistent group definitions

Access more questions from this quiz

Continue to Palo Alto NetSec Architect Practice Questions - Palo Alto Networks Certified Network Security Architect Exam for more practice questions and the full quiz experience.

Access More Questions