Users within an enterprise have been given laptops that are joined to the corporate domain. In some cases, IT has also deployed Linux-based OS systems with a graphical desktop. Information Security needs IP-to-user mapping, which it will use in group-based policies that will limit internet access for the Linux desktop users. Which method can capture IP-to-user mapping information for users on the Linux machines?

Question

Accepted Answer

D. You can deploy the User-ID agent on the Linux desktop machines Deploying the User-ID agent (or configuring a clientless User-ID method that integrates with Linux authentication sources like syslog) allows the firewall to directly acquire IP-to-user mapping from Linux desktop machines.

Answer

A. You can configure Captive Portal with an authentication policy. While Captive Portal can obtain user identity, it requires active user interaction and is not the most efficient or passive method for continuous IP-to-user mapping on managed corporate systems like a User-ID agent.

Answer

B. IP-to-user mapping for Linux users can only be learned if the machine is joined to the domain. This statement is incorrect because User-ID can acquire IP-to-user mapping from various sources, including syslog and API integrations, extending beyond domain-joined Windows machines to Linux environments.

Answer

C. You can set up a group-based security policy to restrict internet access based on group Setting up a group-based security policy is the *application* of IP-to-user mapping for access control, not the method for *capturing* the mapping information itself.

Users within an enterprise have been given laptops that are joined to the corporate domain. In some cases, IT has also deployed Linux-based OS systems with a graphical desktop. Information Security…

Question

Options

How the community answered

Why each option

Topics

Community Discussion