PCNSE · Question #688
A network security administrator has been tasked with deploying User-ID in their organization. What are three valid methods of collecting User-ID information in a network? (Choose three.)
The correct answer is A. Windows User-ID agent B. GlobalProtect C. XMLAPI. User-ID maps IP addresses to usernames using several collection methods. The Windows User-ID Agent monitors Windows Security Event Logs on domain controllers to capture login events. GlobalProtect (the VPN/endpoint client) reports user-to-IP mappings directly to the firewall…
Question
A network security administrator has been tasked with deploying User-ID in their organization. What are three valid methods of collecting User-ID information in a network? (Choose three.)
Options
- AWindows User-ID agent
- BGlobalProtect
- CXMLAPI
- DExternal dynamic list
- EDynamic user groups
How the community answered
(50 responses)- A94% (47)
- D4% (2)
- E2% (1)
Explanation
User-ID maps IP addresses to usernames using several collection methods. The Windows User-ID Agent monitors Windows Security Event Logs on domain controllers to capture login events. GlobalProtect (the VPN/endpoint client) reports user-to-IP mappings directly to the firewall when users authenticate. The XML API allows third-party systems or custom scripts to push user-IP mappings programmatically to the firewall. External Dynamic Lists are used for IP/URL/domain-based policy matching - not user identity collection. Dynamic User Groups are a policy construct that groups users based on identity attributes; they consume User-ID data but do not collect it.
Topics
Community Discussion
No community discussion yet for this question.