Which statement explains the difference between using the PAN-OS integrated User-ID agent and the standalone User-ID agent when using Active Directory for user-to-IP mapping?

The correct answer is C. The standalone User-ID agent consumes fewer resources on the NGFW's management CPU. The standalone User-ID agent (Option C) offloads user-to-IP mapping to an external server, reducing the firewall's management CPU usage compared to the integrated agent, which runs on

Submitted by deeparc· Apr 18, 2026Deploy and Configure

Question

Options

AThe PAN-OS integrated User-ID agent must be a member of the Active Directory domain
BThe PAN-OS integrated User-ID agent consumes fewer resources on the NGFW's management
CThe standalone User-ID agent consumes fewer resources on the NGFW's management CPU
DThe standalone User-ID agent must run directly on the domain controller server

How the community answered

(27 responses)

B
4% (1)
C
93% (25)
D
4% (1)

Explanation

The standalone User-ID agent (Option C) offloads user-to-IP mapping to an external server, reducing the firewall's management CPU usage compared to the integrated agent, which runs on

Topics

#User-ID#Standalone User-ID agent#Integrated User-ID agent#Resource consumption

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice