Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 56

Which User-ID mapping method should be used for an environment with users that do not authenticate to Active Directory?

Answer options

• A. Windows session monitoring
• B. passive server monitoring using the Windows-based agent
• C. Captive Portal
• D. passive server monitoring using a PAN-OS integrated User-ID agent

Correct answer: C

Explanation

The Captive Portal method is suitable for environments where users do not authenticate through Active Directory, as it can prompt users for credentials without relying on AD. The other options either require AD authentication or do not provide a direct way to handle users who are not authenticated through it.