Courseiva
mediumDrag & DropObjective-mapped

PCNSA Practice Question: Drag and drop the steps to configure a User-ID…

Drag and drop the steps to configure a User-ID agent on a Palo Alto Networks firewall into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Enable User-ID on interface, then configure the User-ID agent, then map users, then create security policies, then verify

User-ID setup involves enabling on interface, configuring agent, mapping users, creating policies, and verification.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enable User-ID on interface, then configure the User-ID agent, then map users, then create security policies, then verify

    Why this is correct

    This is the correct order because User-ID must be enabled on the interface before the agent can communicate, mapping requires the agent configuration, policies depend on user mapping, and verification confirms functionality.

  • Configure the User-ID agent, then enable User-ID on interface, then map users, then create security policies, then verify

    Why it's wrong here

    This is incorrect because the agent configuration cannot succeed if User-ID is not yet enabled on the interface; enabling must come first.

  • Enable User-ID on interface, then create security policies, then configure the User-ID agent, then map users, then verify

    Why it's wrong here

    This is incorrect because security policies that use user-based rules require user mapping to be completed first; mapping must come before policy creation.

  • Map users, then enable User-ID on interface, then configure the User-ID agent, then create security policies, then verify

    Why it's wrong here

    This is incorrect because user mapping depends on the agent being configured and the interface enabled; mapping should occur after agent setup.

About these practice questions

One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.