Free Preparation Discussions
MENU
Palo Alto Networks Exam PCNSE Topic 11 Question 88 Discussion
Topic #: 11
What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?
For a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain, the most effective method is to use an Authentication policy targeting users not yet identified by the system.
A) an Authentication policy with 'unknown' selected in the Source User field:
An Authentication policy allows the firewall to challenge unidentified users for credentials. By selecting 'unknown' in the Source User field, the policy targets users who have not yet been identified by the firewall, which would include users on new BYOD devices not joined to the domain.
Once the user provides valid credentials, the firewall can authenticate the user and map their identity to subsequent sessions, enabling the application of user-based policy rules and monitoring.
This approach ensures that new and unknown devices can be properly authenticated and identified without compromising security or requiring the device to be part of the corporate domain.
Germaine
4 months agoRoxanne
4 months agoYoulanda
5 months agoArlene
4 months agoVernell
4 months agoRamonita
4 months agoVernell
4 months agoHuey
4 months agoRosina
4 months agoFelton
4 months agoEmile
5 months agoAnthony
5 months agoNell
4 months agoRaymon
4 months agoTegan
4 months agoJoanna
4 months agoJohnetta
4 months agoBuck
4 months agoDottie
5 months agoVeda
5 months ago