PSE-STRATA practice question 16 of 25
Which three mechanisms are valid for enabling user mapping? (Choose three.)
Full set: 139 questionsUser-ID collects IP-to-username mappings through several mechanisms.
• Captive Portal can directly prompt unauthenticated users and bind the supplied credentials to their source IP.
• Server Monitoring (domain controller log reading) passively learns logon events and maps usernames to IPs.
• Client Probing (UDP/TCP or HTTP probes) actively queries hosts to validate or discover logged-in users. These three mechanisms are officially supported methods for obtaining user mappings.
C. Reverse DNS only resolves host names; it does not supply username information.
D. User behaviour recognition is an analytics function, not a method for creating IP-to-user mappings.
1. PAN-OS 10.2 Administrator’s Guide – “User-ID Overview”, Figure 21, page 523.
2. Same guide – “Configure Server Monitoring”, pages 528-529; “Enable Client Probing”, page 531; “Configure Captive Portal”, page 538.
3. Palo Alto Networks EDU-110 Courseware, Module 6 “User-ID”, slides 21-26, 2022 edition.
Keep practicing
Take the free PSE-STRATA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PSE-STRATA practice questions
- Question 1Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysi…
- Question 2Which four actions can be configured in an Anti-Spyware profile to address command-and-co…
- Question 3Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- Question 4Which two features are key in preventing unknown targeted attacks? (Choose two)
- Question 5A company has deployed the following • VM-300 firewalls in AWS • endpoint protection with…
- Question 6Which Palo Alto Networks security component should an administrator use to and NGFW polic…