Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 26

Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?

Answer options

• A. Windows-based agent deployed on each domain controller
• B. PAN-OS integrated agent deployed on the firewall
• C. Citrix terminal server agent deployed on the network
• D. Windows-based agent deployed on the internal network a domain member

Correct answer: B

Explanation

The PAN-OS integrated agent deployed on the firewall is the best option because it leverages the existing infrastructure efficiently, especially when the firewall's management capacity is underutilized. The other options either require unnecessary deployment across multiple servers or are not suitable for a straightforward network setup like the one described.