Palo_Alto_NetworksPalo_Alto_Networks
PCNSE · Question #856
PCNSE Question #856: Real Exam Question with Answer & Explanation
The correct answer is C: The standalone User-ID agent consumes fewer resources on the NGFW's management CPU. The standalone User-ID agent (Option C) offloads user-to-IP mapping to an external server, reducing the firewall's management CPU usage compared to the integrated agent, which runs on
Submitted by deeparc· Apr 18, 2026Deploy and Configure
Question
Which statement explains the difference between using the PAN-OS integrated User-ID agent and the standalone User-ID agent when using Active Directory for user-to-IP mapping?
Options
- AThe PAN-OS integrated User-ID agent must be a member of the Active Directory domain
- BThe PAN-OS integrated User-ID agent consumes fewer resources on the NGFW's management
- CThe standalone User-ID agent consumes fewer resources on the NGFW's management CPU
- DThe standalone User-ID agent must run directly on the domain controller server
Explanation
The standalone User-ID agent (Option C) offloads user-to-IP mapping to an external server, reducing the firewall's management CPU usage compared to the integrated agent, which runs on
Topics
#User-ID#Standalone User-ID agent#Integrated User-ID agent#Resource consumption
Community Discussion
No community discussion yet for this question.