Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 218

A company wants to use their Active Directory groups to simplify their Security policy creation from Panorama.
Which configuration is necessary to retrieve groups from Panorama?

Answer options

• A. Configure an LDAP Server profile and enable the User-ID service on the management interface.
• B. Configure a group mapping profile to retrieve the groups in the target template.
• C. Configure a Data Redistribution Agent to receive IP User Mappings from User-ID agents.
• D. Configure a master device within the device groups.

Correct answer: D

Explanation

The correct answer is D because a master device is needed to manage and coordinate the group settings across different device groups in Panorama. Answers A, B, and C do not directly address the requirement for group retrieval from the Panorama configuration perspective.