Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 161

Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

Answer options

• A. LDAP Server Profile configuration
• B. GlobalProtect
• C. Windows-based User-ID agent
• D. PAN-OS integrated User-ID agent

Correct answer: B

Explanation

The correct answer is B, GlobalProtect, as it provides an explicit and secure method for mapping user identities to IP addresses in high-security environments. The other options, while useful in different contexts, may not guarantee the same level of clarity and control over user mapping that GlobalProtect offers.