Palo Alto Networks Certified Network Security Consultant (PCNSC) — Question 5

An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations. They have also purchased a Support license, a Threat license, a URL Filtering license, and a WildFire license for each firewall.
What additional license do they need to purchase?

Answer options

• A. an IoT Security license for each deployed firewall
• B. a Cortex Data Lake license
• C. an IoT Security license for the perimeter firewall
• D. an Enterprise Data Loss Prevention (DLP) license

Correct answer: B

Explanation

The correct answer is B because a Cortex Data Lake license is necessary for enabling Device-ID functionality for policy recommendations. The other options either pertain to different functionalities or are not required for the specific use case of utilizing Device-ID.