ExamTopics Logo
Mail Us[email protected]
Menu
Palo-Alto-Networks Discussions
exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam
Go to Exam

Exam PCNSE topic 1 question 406 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 406
Topic #: 1
[All PCNSE Questions]

An administrator wants to configure the Palo Alto Networks Windows User-ID agent to map IP addresses to usernames.

The company uses four Microsoft Active Directory servers and two Microsoft Exchange servers, which can provide logs for login events.

All six servers have IP addresses assigned from the following subnet: 192.168.28.32/27.
The Microsoft Active Directory servers reside in 192.168.28.32/28, and the Microsoft Exchange servers reside in 192.168.28.48/28.

What information does the administrator need to provide in the User Identification > Discovery section?

  • A. the IP-address and corresponding server type (Microsoft Active Directory or Microsoft Exchange) for each of the six servers
  • B. network 192.168.28.32/28 with server type Microsoft Active Directory and network 192.168.28.48/28 with server type Microsoft Exchange
  • C. one IP address of a Microsoft Active Directory server and “Auto Discover” enabled to automatically obtain all five of the other servers
  • D. network 192.168.28.32/27 with server type Microsoft
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by chrisy042 at Nov. 25, 2022, 5:43 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
chrisy042
Highly Voted 1 year, 8 months ago
Selected Answer: A
To collect all of the required mappings, the User-ID agent must connect to all servers that your users log in to in order to monitor the security log files on all servers that contain login events. Auto-discovery locates domain controllers in the local domain only; you must manually add Exchange servers, eDirectory servers, and syslog senders. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-mapping-using-the-windows-user-id-agent/configure-the-windows-based-user-id-agent-for-user-mapping
upvoted 11 times
...
327c7c8
Most Recent 3 months, 3 weeks ago
Selected Answer: D
the discovery option work only with Active Directory not Microsoft exchange nor the Novell eDirectory. so the correct answer would be (D)
upvoted 1 times
...
SH_
5 months, 2 weeks ago
Selected Answer: A
A because auto-discovery does not work with Exchange servers. It would be C if there were only Active Directory DCs.
upvoted 1 times
...
Marshpillowz
5 months, 3 weeks ago
Selected Answer: A
A is forrect
upvoted 1 times
...
Metgatz
7 months ago
Selected Answer: A
A is the correct option
upvoted 1 times
...
Frightened_Acrobat
1 year, 3 months ago
Selected Answer: A
What chrisy said.
upvoted 2 times
...
mz101
1 year, 7 months ago
Yes, should be A.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago