Palo Alto Networks PSE-Strata-Pro-24 Exam - Topic 2 Question 6 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata-Pro-24 exam

Question #: 6
Topic #: 2

[All PSE-Strata-Pro-24 Questions]

The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms? (Choose two.)

AIntegrated agent

BGlobalProtect agent

CWindows-based agent

DCloud Identity Engine (CIE)

Show Suggested Answer

Suggested Answer: A, C

User-ID is a feature in PAN-OS that maps IP addresses to usernames by integrating with various directory services (e.g., Active Directory). User-ID can be implemented through agents provided by Palo Alto Networks. Here's how each option applies:

Option A: Integrated agent

The integrated User-ID agent is built into PAN-OS and does not require an external agent installation. It is configured directly on the firewall and integrates with directory services to retrieve user information.

This is correct.

Option B: GlobalProtect agent

GlobalProtect is Palo Alto Networks' VPN solution and does not function as a User-ID agent. While it can be used to authenticate users and provide visibility, it is not categorized as a User-ID agent.

This is incorrect.

Option C: Windows-based agent

The Windows-based User-ID agent is a standalone agent installed on a Windows server. It collects user mapping information from directory services and sends it to the firewall.

This is correct.

Option D: Cloud Identity Engine (CIE)

The Cloud Identity Engine provides identity services in a cloud-native manner but is not a User-ID agent. It synchronizes with identity providers like Azure AD and Okta.

This is incorrect.

Palo Alto Networks documentation on User-ID

Knowledge Base article on User-ID Agent Options

by Serina at Jan 25, 2025, 05:58 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata-Pro-24 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Huey

3 months ago

Yup, just the Integrated and Windows-based agents!

upvoted 0 times

...

Glennis

3 months ago

I thought the Cloud Identity Engine was part of it too?

upvoted 0 times

...

Elvis

3 months ago

Wait, is the GlobalProtect agent not included?

upvoted 0 times

...

Francesco

4 months ago

Totally agree, those are the right ones!

upvoted 0 times

...

Carey

4 months ago

It's the Integrated agent and Windows-based agent.

upvoted 0 times

...

Jules

4 months ago

I’m pretty certain the integrated agent is correct, but I’m torn between the Windows-based agent and the Cloud Identity Engine.

upvoted 0 times

...

Suzan

4 months ago

I feel like the GlobalProtect agent might be involved somehow, but I can't recall if it's one of the options here.

upvoted 0 times

...

Murray

4 months ago

I remember practicing a question about the User-ID agent, and I think it was definitely the integrated agent and the Windows-based agent.

upvoted 0 times

...

Barbra

5 months ago

I think the integrated agent is one of the forms, but I'm not sure about the second one. Maybe it's the Windows-based agent?

upvoted 0 times

...

Berry

5 months ago

I think the answer is A and B. The User-ID agent is integrated with PAN-OS, and there's also a GlobalProtect agent that works with it. I'm not sure about the other options, though. I'll double-check my notes to make sure.

upvoted 0 times

...

Glory

5 months ago

Okay, let's see. The question is asking about the forms of the PAN-OS User-ID integrated agent. I'm pretty confident that A (Integrated agent) is one of the forms, but I'm not sure about the other one. I'll have to review the PAN-OS documentation to be sure.

upvoted 0 times

...

Chau

5 months ago

Hmm, I'm not too sure about this one. I know the User-ID agent is part of PAN-OS, but I can't remember the specific forms it comes in. I'll have to think this through carefully.

upvoted 0 times

...

Carmelina

5 months ago

I think the answer is A and C. The PAN-OS User-ID agent is included with the PAN-OS software, and it comes in both an integrated form and a Windows-based agent form.

upvoted 0 times

...

Kaycee

12 months ago

A and D, no doubt. The integrated agent and the Cloud Identity Engine are the two forms of the User-ID agent. Although, I'm not sure if the CIE is actually a form of the agent or just a separate thing. Hmm, maybe I'll phone a friend on this one.

upvoted 0 times

Dustin

11 months ago

I think you're right. The Cloud Identity Engine might be a separate thing, not a form of the agent.

upvoted 0 times

...

Dustin

12 months ago

A and D are correct. The integrated agent and Cloud Identity Engine are the two forms of the User-ID agent.

upvoted 0 times

...

Oretha

1 year ago

A and B, for sure. The integrated agent and the GlobalProtect agent are the two forms of the User-ID agent. Anything else is just a distraction, like my dog barking in the background.

upvoted 0 times