Cybersecurity-Practitioner Cybersecurity Fundamentals Practice Question
An organization is adopting a Zero Trust architecture. During the implementation of Least Privilege Access, the network security team needs to configure security policies that restrict traffic based on user identity rather than IP addresses alone. Which feature must be enabled and integrated with the Palo Alto Networks firewall to achieve this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
User-ID agent or Panorama User-ID mapping
User-ID integrates the firewall with enterprise directory services to map IP addresses to usernames, enabling policy enforcement based on user and group identity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
GlobalProtect with Clientless VPN
Why it's wrong here
Incorrect. GlobalProtect provides remote access but User-ID is the core technology mapping IP addresses to identities for security rules.
- ✗
App-ID cloud-based application signatures
Why it's wrong here
Incorrect. App-ID identifies applications regardless of port and protocol, not user identity.
- ✓
User-ID agent or Panorama User-ID mapping
Why this is correct
Correct. User-ID provides identity-based visibility and policy enforcement by mapping usernames to IP addresses.
- ✗
WildFire threat intelligence cloud
Why it's wrong here
Incorrect. WildFire is used for malware analysis, not user identity mapping.
About these practice questions
Courseiva writes every Cybersecurity-Practitioner question from scratch — 206 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This Cybersecurity-Practitioner practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Cybersecurity-Practitioner exam.