Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 610

A company is deploying User-ID in their network. The firewall team needs to have the ability to see and choose from a list of usernames and user groups directly inside the Panorama policies when creating new security rules.
How can this be achieved?

Answer options

• A. by configuring User-ID group mapping in Panorama > User Identification
• B. by configuring Master Device in Panorama > Device Groups
• C. by configuring User-ID source device in Panorama > Managed Devices
• D. by configuring Data Redistribution Client in Panorama > Data Redistribution

Correct answer: B

Explanation

The correct answer is B because configuring the Master Device in Panorama > Device Groups allows the firewall to utilize and reference user group information effectively. The other options do not provide the necessary access to user and group details within the security rule creation process.