Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 4

Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?

Answer options

• A. Windows-based agent deployed on the internal network
• B. PAN-OS integrated agent deployed on the internal network
• C. Citrix terminal server deployed on the internal network
• D. Windows-based agent deployed on each of the WAN Links

Correct answer: A

Explanation

The Windows-based agent deployed on the internal network is ideal as it minimizes bandwidth usage by centralizing User-ID management. The PAN-OS integrated agent and Citrix terminal server options would not be as efficient in a bandwidth-limited environment, while deploying a Windows-based agent on each WAN link would increase resource consumption unnecessarily.