A security engineer creates a policy allowing only members of the 揊inance?Active Directory group to access a cloud-based accounting application. Which NGFW capability makes this policy possible?

The correct answer is B. User-ID / identity integration. Traditional firewalls write policies based on IP addresses, which are not reliably tied to specific users (especially in DHCP environments or shared workstations). User-ID / identity integration solves this by mapping IP addresses to authenticated user accounts and group…

User Identification and Identity Integration

Question

Options

ADynamic routing protocols
BUser-ID / identity integration
CHigh availability clustering
DNAT policy

How the community answered

(27 responses)

A
7% (2)
B
89% (24)
D
4% (1)

Explanation

Traditional firewalls write policies based on IP addresses, which are not reliably tied to specific users (especially in DHCP environments or shared workstations). User-ID / identity integration solves this by mapping IP addresses to authenticated user accounts and group memberships pulled from directory services like Active Directory, LDAP, or RADIUS. The NGFW can then enforce policies referencing user identities or groups (e.g., 'Finance group') rather than IP ranges. Dynamic routing protocols (A) manage network path selection. High availability clustering (C) provides redundancy and failover. NAT policy (D) translates IP addresses. None of these have any awareness of who the user is or what group they belong to.

Topics

#User-ID#Identity-based policy#Active Directory integration#Group-based access control

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice