2.6 Configure On-Premises and Cloud Identity Engine User-ID NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a PAN-OS firewall in a branch office and a User-ID agent at the headquarters. The branch office firewall needs to enforce user-based policies, but it does not have direct access to the headquarters User-ID agent. The branch office has its own local authentication server. What is the most efficient way to provide user-to-IP mappings to the branch office firewall?

   • AEnable User-ID redistribution from the headquarters firewall to the branch office firewall.
   • BConfigure the branch office firewall to use the headquarters User-ID agent via a VPN tunnel.
   • CConfigure the branch office firewall to use the Cloud Identity Engine for user mappings.
   • DInstall a User-ID agent at the branch office and configure it to monitor the local authentication server.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An administrator needs to map Active Directory groups to firewall roles so that security policies can reference those groups. Which configuration object is used to define this mapping?

   • AGroup Mapping configuration
   • BAuthentication profile
   • CUser-ID agent
   • DServer monitoring profile
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which User-ID method maps users to IP addresses by requiring users to authenticate through a web page?

   • ADirectory sync
   • BAgent-based
   • CCaptive portal
   • DServer monitoring
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of User-ID redistribution?

   • ATo import users from Active Directory
   • BTo map groups to roles
   • CTo authenticate users for VPN
   • DTo share user-to-IP mappings with other firewalls or collectors
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a PAN-OS firewall that uses a User-ID agent for user mapping. The agent is configured to monitor a syslog server that receives authentication events from multiple applications. The administrator notices that some user-to-IP mappings are incorrect, showing users logged in from IP addresses they have never used. The syslog server is receiving events from both the corporate network and a remote office. What is the most likely cause of the incorrect mappings?

   • AThe User-ID agent is not configured to parse the syslog messages correctly.
   • BThe User-ID agent is not configured to filter events from the remote office.
   • CThe User-ID agent is not configured to use the correct source IP for the mappings.
   • DThe syslog server is receiving events from the remote office, and the agent is mapping those events to the wrong IP addresses.
   Reveal Solution Discussion Select an answer first