Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management-plane resources are lightly utilized. Given the…

Question

Options

• ACitrix terminal server agent deployed on the network
• BWindows-based agent deployed on each domain controller
• CPAN-OS integrated agent deployed on the firewall
• Da syslog listener

• A
  4% (2)
• B
  2% (1)
• C
  85% (39)
• D
  9% (4)

Explanation

The PAN-OS integrated User-ID agent is built into the firewall itself and is suitable for small to medium environments where management-plane resources are not heavily utilized. Given the scenario - one floor, one building, two domain controllers on a single network, lightly utilized management plane - the integrated agent is sufficient and avoids the overhead of deploying separate Windows-based agents (B). A Windows-based agent (B) makes sense for larger or distributed environments. A Citrix terminal server agent (A) is for VDI/Citrix environments. A syslog listener (D) is an alternative collection method but typically supplementary. The integrated agent is the simplest and most appropriate choice here.

No community discussion yet for this question.