Courseiva
← PCNSE
Full test
Deploy and Configure Firewalls →mediumMultiple ChoiceObjective-mapped

PCNSE Deploy and Configure Firewalls Practice Question

Which of the following is NOT a valid method to identify users for User-ID on a Palo Alto Networks firewall?

⚠ Common exam trap

Test-takers frequently confuse the XML API's ability to retrieve user information (via the User-ID API) with being a direct identification method, but the XML API itself does not perform the identification—it only exposes data already collected by other User-ID agents.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

XML API

The XML API is not a method for identifying users for User-ID; it is a management interface used to configure, monitor, and retrieve data from the firewall programmatically. User-ID relies on mechanisms that actively map IP addresses to usernames, such as LDAP sync, Terminal Services Agent, and Captive Portal, none of which involve the XML API.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    XML API

    Why this is correct

    The XML API is used for configuration and data retrieval, not for user identification.

  • ✗

    LDAP sync

    Why it's wrong here

    LDAP sync is a valid method that pulls user groups from LDAP.

  • ✗

    Terminal Services Agent (TS Agent)

    Why it's wrong here

    TS Agent is a valid method by monitoring Windows server logons.

  • ✗

    Captive Portal

    Why it's wrong here

    Captive Portal is a valid method that prompts users to authenticate.

About these practice questions

This PCNSE question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.