PCNSE Question #382: Real Exam Question with Answer & Explanation

The correct answer is C: GlobalProtect. Because GlobalProtect users must authenticate to gain access to the network, the IP address-to- username mapping is explicitly known. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/user-id/user-id-concepts/user- mapping/globalprotect.html

Submitted by yousef_jo· Apr 18, 2026Plan

Question

Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

Options

APAN-OS integrated User-ID agent
BLDAP Server Profile configuration
CGlobalProtect
DWindows-based User-ID agent

Explanation

Because GlobalProtect users must authenticate to gain access to the network, the IP address-to- username mapping is explicitly known. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/user-id/user-id-concepts/user- mapping/globalprotect.html

Topics

#User-ID#GlobalProtect#Security Best Practices#IP-User Mapping

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice Browse All PCNSE Questions