PSE-STRATA · Question #168
Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?
The correct answer is A. User ID and Device-ID. User-ID maps network traffic to authenticated users rather than IP addresses, while Device-ID fingerprints and tracks individual devices by their characteristics - together they let Palo Alto Networks firewalls enforce policy based on who and what is communicating, even when IP…
Question
Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?
Options
- AUser ID and Device-ID
- BSource-D and Network.ID
- CSource ID and Device-ID
- DUser-ID and Source-ID
How the community answered
(35 responses)- A80% (28)
- B6% (2)
- C3% (1)
- D11% (4)
Explanation
User-ID maps network traffic to authenticated users rather than IP addresses, while Device-ID fingerprints and tracks individual devices by their characteristics - together they let Palo Alto Networks firewalls enforce policy based on who and what is communicating, even when IP addresses change or devices roam across network segments.
Why the distractors fail:
- B (Source-D and Network.ID) - Neither of these is a real Palo Alto Networks technology; "Source-D" and "Network.ID" are fabricated terms.
- C (Source ID and Device-ID) - Device-ID is real, but "Source ID" is not a Palo Alto Networks feature; the correct counterpart is User-ID.
- D (User-ID and Source-ID) - User-ID is real, but "Source-ID" again doesn't exist in Palo Alto's product vocabulary.
Memory tip: Think of the two genuine identifiers as answering "Who?" (User-ID) and "What?" (Device-ID) - both bypass the unreliable "Where?" that an IP address represents. If you see "Source-ID" or "Network.ID" on the exam, it's a distractor invented to sound plausible.
Topics
Community Discussion
No community discussion yet for this question.