An engineer creates a set of rules in a Device Group (Panorama) to permit traffic to various services for a specific LDAP user group.
What needs to be configured to ensure Panorama can retrieve user and group information for use in these rules?
An engineer creates a set of rules in a Device Group (Panorama) to permit traffic to various services for a specific LDAP user group.
What needs to be configured to ensure Panorama can retrieve user and group information for use in these rules?
To ensure Panorama can retrieve user and group information for use in rules, a service route to the LDAP server needs to be configured. This allows Panorama to directly communicate with the LDAP server to obtain the necessary user and group data.
C is the correct Answer
C.. why are all of the answers wrong on here?
It wouldn't surprise me if they've done a deal with the various exam companies to allow them to put wrong answers up in exchange for no legal action for violating various NDA's - after all the more people that fail then both this site and the exam providers make more money so its a win-win
Its much more likely that they are taking the exam and just dumping questions seen from taking the exam once and they don't actually do the work to find the right answers. I mean, its better for the exam taker to do the work to find the right answer anyways. Similar to what you said, by not putting the right answer they most likely avoid the worst of the legal ramifications.
Like seriously, how would this person know the correct answer to 10s of thousands of questions. They just discover the questions and dump em here. I think people who just want to memorize the answers are lazy as hell. Its one thing to want to know the questions but its laziness to refuse to validate the answers.
I respectfully agree with everyone. I only come here after studying and having practice with the product. Many people want to decorate, but unfortunately, they don't always succeed. I only use this site because it offers a valuable opportunity to discuss and inform those who are genuinely interested in understanding the subject matter, rather than simply memorizing it.
Might be C - Master Device https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMtpCAG
Answer C - refer to https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PMtpCAG
C https://live.paloaltonetworks.com/t5/general-topics/what-is-a-master-device-in-device-groups/td-p/15032
I think this is another tricky question. It asks "...configured to ensure PANORAMA can retrieve user and group info...". If the answer is what is best practice for the FIREWALLS to apply the Security rules then the answer would be C, so the Master Device can redistribute user mapping info. But since it is for the Panorama, I think it needs the LDAP server info, so I am going with Answer B.
so, what will the panorama use such information for? since it says it is for policy use.
C, Master Device
C is correct