156-315.81.20 Identity Awareness Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  URL Filtering

  Why it's wrong here

  The URL Filtering blade inspects web traffic and categorizes websites to prevent access to malicious or unauthorized domains. It controls web access based on content categories rather than resolving Active Directory user identities or computer objects for firewall rule matching.

• ✓

  Identity Awareness

  Why this is correct

  Identity Awareness is the blade that acquires user and computer identities from Active Directory and maps them to gateway connections, enabling access control rules keyed on AD user groups and computer objects. Without it, the gateway cannot resolve identities for rule matching.

• ✗

  Threat Emulation

  Why it's wrong here

  Threat Emulation is a sandboxing technology that executes suspicious files in a virtual environment to detect zero-day malware. It focuses entirely on threat prevention and payload analysis rather than tracking user logins or directory group memberships.

• ✗

  Application Control

  Why it's wrong here

  Application Control identifies and manages the usage of thousands of web applications and widgets across the network. While it can be combined with Identity Awareness in policies, it does not perform the underlying user mapping and directory integration tasks.