Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management-plane resources are lightly utilized.
Given the size of this environment, which User-ID collection method is sufficient?
In a relatively simple and limited environment like this one, with just two Active Directory domain controllers and lightly utilized firewall management resources, the PAN-OS integrated agent deployed on the firewall is the most sufficient User-ID collection method. This method is effective for environments with a smaller scale and fewer domain controllers, and it leverages the existing firewall without necessitating additional agents or hardware.
B) less than 10 DCs, firewall agent is recommended
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-mapping-using-the-pan-os-integrated-user-id-agent
B appears to be correct here
I agree with B
B lightly utilized (not highly utilized) with less than 10DCs