Palo Alto Networks Exam PCNSE Topic 4 Question 95 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam

Question #: 95
Topic #: 4

A customer wants to deploy User-ID on a Palo Alto Network NGFW with multiple vsys. One of the vsys will support a GlobalProtect portal and gateway. the customer uses Windows

ADeploy the GlobalProtect as a lee data hub.

BDeploy Window User 0 agents on each domain controller.

CDeploys AILS integrated Use 10 agent on each vsys.

DDeploy a M.200 as a Users-ID collector.

Show Suggested Answer

Suggested Answer: A

by Tamie at Aug 25, 2024, 09:07 PM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Fannie

9 months ago

But wouldn't deploying the GlobalProtect as a data hub be more efficient for the customer's needs?

upvoted 0 times

...

Paola

9 months ago

I don't know, man. Deploying GlobalProtect as a leaf data hub in option A sounds a bit sketchy to me. Seems like it could be a recipe for disaster.

upvoted 0 times

Rickie

8 months ago

Thea: That could work too, but I'm still not sure about option A.

upvoted 0 times

...

Torie

8 months ago

What about deploying a M.200 as a User-ID collector?

upvoted 0 times

...

Thea

8 months ago

Maybe deploying Window Becky agents on each domain controller would be a safer option.

upvoted 0 times

...

Becky

8 months ago

I agree, deploying GlobalProtect as a leaf data hub does sound risky.

upvoted 0 times

...

Marshall

8 months ago

Yeah, I think deploying Window Leanora agents on each domain controller might be a safer option.

upvoted 0 times

...

Leanora

8 months ago

I agree, deploying GlobalProtect as a leaf data hub does seem risky.

upvoted 0 times

...

Tresa

9 months ago

I disagree, I believe option D is better as the M-200 is specifically designed for User-ID collection.

upvoted 0 times

...

Fannie

9 months ago

I think option C is the best choice because it integrates with Active Directory.

upvoted 0 times

...

Ben

9 months ago

Hold up, did someone say M.200? That's gotta be a joke, right? Option D is clearly the wrong choice here.

upvoted 0 times

...

Arlene

9 months ago

Hmm, I'm not sure about that. Option C looks interesting, with the AILS integrated User-ID agent on each vsys. Might be a bit more complex, but could provide more flexibility.

upvoted 0 times

...

Tammy

9 months ago

I think option B is the way to go. Deploying Windows User-ID agents on each domain controller seems like the most straightforward approach to getting User-ID working with the multiple vsys setup.

upvoted 0 times

Geraldine

9 months ago

D) Deploy a M-200 as a User-ID collector.

upvoted 0 times

...

Daniel

9 months ago

C) Deploys AILS integrated User-ID agent on each vsys.

upvoted 0 times

...

Cecilia

9 months ago

B) Deploy Window User-ID agents on each domain controller.

upvoted 0 times

...