Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Palo Alto Networks PSE-Strata-Pro-24 Exam - Topic 2 Question 6 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata-Pro-24 exam

Question #: 6
Topic #: 2

[All PSE-Strata-Pro-24 Questions]

The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms? (Choose two.)

AIntegrated agent

BGlobalProtect agent

CWindows-based agent

DCloud Identity Engine (CIE)

Show Suggested Answer

Suggested Answer: A, C

User-ID is a feature in PAN-OS that maps IP addresses to usernames by integrating with various directory services (e.g., Active Directory). User-ID can be implemented through agents provided by Palo Alto Networks. Here's how each option applies:

Option A: Integrated agent

The integrated User-ID agent is built into PAN-OS and does not require an external agent installation. It is configured directly on the firewall and integrates with directory services to retrieve user information.

This is correct.

Option B: GlobalProtect agent

GlobalProtect is Palo Alto Networks' VPN solution and does not function as a User-ID agent. While it can be used to authenticate users and provide visibility, it is not categorized as a User-ID agent.

This is incorrect.

Option C: Windows-based agent

The Windows-based User-ID agent is a standalone agent installed on a Windows server. It collects user mapping information from directory services and sends it to the firewall.

This is correct.

Option D: Cloud Identity Engine (CIE)

The Cloud Identity Engine provides identity services in a cloud-native manner but is not a User-ID agent. It synchronizes with identity providers like Azure AD and Okta.

This is incorrect.

Palo Alto Networks documentation on User-ID

Knowledge Base article on User-ID Agent Options

by Serina at Jan 25, 2025, 05:58 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata-Pro-24 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Huey

10 months ago

Yup, just the Integrated and Windows-based agents!

upvoted 0 times

...

Glennis

10 months ago

I thought the Cloud Identity Engine was part of it too?

upvoted 0 times

...

Elvis

10 months ago

Wait, is the GlobalProtect agent not included?

upvoted 0 times

...

Francesco

11 months ago

Totally agree, those are the right ones!

upvoted 0 times

...

Carey

11 months ago

It's the Integrated agent and Windows-based agent.

upvoted 0 times

...

Jules

11 months ago

I’m pretty certain the integrated agent is correct, but I’m torn between the Windows-based agent and the Cloud Identity Engine.

upvoted 0 times

...

Suzan

11 months ago

I feel like the GlobalProtect agent might be involved somehow, but I can't recall if it's one of the options here.

upvoted 0 times

...

Murray

11 months ago

I remember practicing a question about the User-ID agent, and I think it was definitely the integrated agent and the Windows-based agent.

upvoted 0 times

...

Barbra

11 months ago

I think the integrated agent is one of the forms, but I'm not sure about the second one. Maybe it's the Windows-based agent?

upvoted 0 times

...

Berry

11 months ago

I think the answer is A and B. The User-ID agent is integrated with PAN-OS, and there's also a GlobalProtect agent that works with it. I'm not sure about the other options, though. I'll double-check my notes to make sure.

upvoted 0 times

...

Glory

11 months ago

Okay, let's see. The question is asking about the forms of the PAN-OS User-ID integrated agent. I'm pretty confident that A (Integrated agent) is one of the forms, but I'm not sure about the other one. I'll have to review the PAN-OS documentation to be sure.

upvoted 0 times

...

Chau

12 months ago

Hmm, I'm not too sure about this one. I know the User-ID agent is part of PAN-OS, but I can't remember the specific forms it comes in. I'll have to think this through carefully.

upvoted 0 times

...

Carmelina

12 months ago

I think the answer is A and C. The PAN-OS User-ID agent is included with the PAN-OS software, and it comes in both an integrated form and a Windows-based agent form.

upvoted 0 times

...

Kaycee

2 years ago

A and D, no doubt. The integrated agent and the Cloud Identity Engine are the two forms of the User-ID agent. Although, I'm not sure if the CIE is actually a form of the agent or just a separate thing. Hmm, maybe I'll phone a friend on this one.

upvoted 0 times

Dustin

2 years ago

I think you're right. The Cloud Identity Engine might be a separate thing, not a form of the agent.

upvoted 0 times

...

Dustin

2 years ago

A and D are correct. The integrated agent and Cloud Identity Engine are the two forms of the User-ID agent.

upvoted 0 times

...

...

Oretha

2 years ago

A and B, for sure. The integrated agent and the GlobalProtect agent are the two forms of the User-ID agent. Anything else is just a distraction, like my dog barking in the background.

upvoted 0 times

Simona

2 years ago

Yes, the integrated agent and GlobalProtect agent are the ones included with PAN-OS software.

upvoted 0 times

...

Malcom

2 years ago

I agree, A and B are the correct forms of the User-ID agent.

upvoted 0 times

...

...

Wilda

2 years ago

B and D, obviously. The GlobalProtect agent and the Cloud Identity Engine are the two forms of the User-ID agent. I'm all about that cloud life!

upvoted 0 times

Ilda

2 years ago

It's great that PAN-OS software includes both options for the User-ID integrated agent.

upvoted 0 times

...

Pa

2 years ago

I prefer the Cloud Identity Engine for its cloud capabilities.

upvoted 0 times

...

Samira

2 years ago

GlobalProtect agent and Cloud Identity Engine are the two forms of the User-ID agent.

upvoted 0 times

...

Rikki

2 years ago

I agree, B and D are the correct options.

upvoted 0 times

...

...

Adelina

2 years ago

Yes, that's correct. The PAN-OS User-ID integrated agent is available in both Windows-based agent and GlobalProtect agent forms.

upvoted 0 times

...

Catherin

2 years ago

I believe it also comes in GlobalProtect agent form.

upvoted 0 times

...

Adelina

2 years ago

I think the PAN-OS User-ID integrated agent comes in Windows-based agent form.

upvoted 0 times

...

Reyes

2 years ago

A and C, duh! The User-ID agent is integrated with PAN-OS and also comes as a Windows-based agent. Gotta catch 'em all!

upvoted 0 times

Vincenza

2 years ago

It's important to have both the integrated agent and the Windows-based agent for complete user identification in PAN-OS.

upvoted 0 times

...

Tequila

2 years ago

Yes, the integrated agent and the Windows-based agent are the two forms of the PAN-OS User-ID integrated agent.

upvoted 0 times

...

Sheron

2 years ago

I agree, A and C are the correct options for the PAN-OS User-ID integrated agent.

upvoted 0 times

...

...