What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?

The correct answer is B. an Authentication policy with 'unknown' selected in the Source User field. As authentication policy with the "Unknown", as unknown - Includes all users for whom the firewall does not have IP address-to-username mappings. After the rule evokes authentication, the firewall creates user mappings for unknown users based on the usernames they entered…

Submitted by weili_xi· Apr 18, 2026Deploy and Configure

Question

Options

Aa Security policy with 'known-user" selected in the Source User field
Ban Authentication policy with 'unknown' selected in the Source User field
Ca Security policy with 'unknown' selected in the Source User field
Dan Authentication policy with 'known-user' selected in the Source User field

How the community answered

(39 responses)

A
3% (1)
B
90% (35)
C
3% (1)
D
5% (2)

Explanation

As authentication policy with the "Unknown", as unknown - Includes all users for whom the firewall does not have IP address-to-username mappings. After the rule evokes authentication, the firewall creates user mappings for unknown users based on the usernames they entered. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/policies/policies- authentication/building-blocks-of-an-authentication-policy-rule

Topics

#Authentication Policy#BYOD#User-ID#Unknown User

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice