Identify the correct order to configure the PAN-OS integrated USER-ID agent. 3. add the service account to monitor the server(s) 2. define the address of the servers to be monitored on the firewall…

Question

Options

• A2-3-4-1
• B1-4-3-2
• C3-1-2-4
• D1-3-2-4

• A
  8% (1)
• C
  8% (1)
• D
  85% (11)

Explanation

Option D (1-3-2-4) is correct because the logical flow requires you to create credentials before using them: first establish the service account on the Domain Controller (step 1), then grant that account access to monitor the target servers (step 3), then point the firewall at those servers by defining their addresses (step 2), and finally commit and verify the connection (step 4) - you can't verify what hasn't been fully configured yet.

• A (2-3-4-1) fails because it tries to define server addresses and even commits before the service account exists, leaving the firewall with no valid credentials to connect with.
• B (1-4-3-2) commits and verifies (step 4) in the middle of setup - before the service account is assigned or servers are defined - so there's nothing valid to verify yet.
• C (3-1-2-4) attempts to add a service account to servers before that account has been created in step 1, which is logically impossible.

Memory tip: Think "Build the key, unlock the door, tell the firewall where the door is, then check it works" - create → assign → define → commit/verify (1-3-2-4).

No community discussion yet for this question.