exam questions

Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 374 discussion

Actual exam question from Palo Alto Networks's PCNSA
Question #: 374
Topic #: 1
[All PCNSA Questions]

What are three advantages of user-to-group mapping? (Choose three.)

  • A. It does not require additional objects to be configured.
  • B. It does not require a Server profile.
  • C. It simplifies user administration.
  • D. It automatically adds new users to the appropriate group.
  • E. It allows an administrator to write more granular policies.
Show Suggested Answer Hide Answer
Suggested Answer: ACD 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
cjace
Highly Voted 6 months, 3 weeks ago
CDE - C. It simplifies user administration. Defining policy rules based on user group membership rather than individual users simplifies administration because you don’t have to update the rules whenever group membership changes1. D. It automatically adds new users to the appropriate group. User-to-group mapping can handle very large Active Directory environments, and it’s scalable2. This implies that as new users are added to the system, they can be automatically mapped to the appropriate groups based on their attributes. E. It allows an administrator to write more granular policies. By mapping users to groups, administrators can write policies that are more specific to the needs and permissions of each group1.
upvoted 6 times
...
leipeG
Highly Voted 1 year ago
Selected Answer: ACD
A. It does not require additional objects to be configured. C. It simplifies user administration. D. It automatically adds new users to the appropriate group.
upvoted 5 times
...
ploiesti
Most Recent 3 days, 3 hours ago
Selected Answer: ACD
B.it requires a server profile. E. it`s actually more general rules (if you only have users then you need to add the users to the rule - that is more granular).
upvoted 1 times
...
de7cdfd
1 week, 3 days ago
Selected Answer: CDE
A is not correct. Group-Mapping needs LDAP server profile.
upvoted 1 times
ploiesti
3 days, 3 hours ago
LDAP server profile is not an object.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago