PCNSA · Question #158
Based on the screenshot, what is the purpose of the group in User labelled "it"?
The correct answer is C. Allow users in group "it" to access IT applications. The purpose of the group labeled "it" is to define a collection of users who are specifically permitted to access IT applications based on configured security policies.
Question
Based on the screenshot, what is the purpose of the group in User labelled "it"?
Options
- AAllows "any" users to access servers in the DMZ zone.
- BAllows users to access IT applications on all ports.
- CAllow users in group "it" to access IT applications.
- DAllow users in group "DMZ" to access IT applications.
How the community answered
(41 responses)- A2% (1)
- B2% (1)
- C88% (36)
- D7% (3)
Why each option
The purpose of the group labeled "it" is to define a collection of users who are specifically permitted to access IT applications based on configured security policies.
This choice incorrectly states that 'any' users are allowed to access servers in the DMZ, which is not tied to the specific 'it' group and is too broad.
This choice states access on 'all ports,' which is overly permissive and doesn't directly relate to the specific 'it' group's purpose for 'IT applications.'
This choice correctly identifies that the group 'it' is used to categorize users and grant them access to specific IT applications, which is a fundamental function of user groups in network security policies. User groups simplify policy management by allowing administrators to apply rules to multiple users simultaneously rather than individually.
This choice incorrectly refers to a group 'DMZ' instead of the specified 'it' group in the question.
Concept tested: User group-based access control
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/user-id/create-user-groups
Topics
Community Discussion
No community discussion yet for this question.