Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 388

Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

Answer options

• A. Active Directory monitoring
• B. Windows session monitoring
• C. Windows client probing
• D. domain controller monitoring

Correct answer: D

Explanation

Domain controller monitoring is effective for discovering user IDs because it allows for direct observation of the authentication and authorization processes managed by the domain controllers. The other options, while useful for various aspects of Windows environments, do not specifically focus on the domain controllers that are crucial for user ID mapping.