Palo Alto Networks Exam PCNSE Topic 12 Question 108 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam

Question #: 108
Topic #: 12

A company has a PA-3220 NGFW at the edge of its network and wants to use active directory groups in its Security policy rules. There are 1500 groups in its active directory. An engineer has been provided 800 active directory groups to be used in the Security policy rules.

What is the engineer's next step?

ACreate a Group Mapping with 800 groups in the Group Include List.

BCreate two Group Include Lists, each with 400 Active Directory groups.

CCreate a Group Include List with the 800 Active Directory groups.

DCreate two Group Mappings, each with 400 groups in the Group Include List.

Show Suggested Answer

Suggested Answer: B

by Alyssa at Mar 07, 2025, 07:51 PM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joseph

1 months ago

I think creating a Group Include List with all 800 groups would be more efficient in this case.

upvoted 0 times

...

Emilio

1 months ago

I agree with Youlanda, having two separate lists would make it easier to manage.

upvoted 0 times

...

Oretha

2 months ago

D) Create two Group Mappings, each with 400 groups in the Group Include List. Gotta keep that Active Directory in check, am I right? Wouldn't want to accidentally include the 'Hackers Anonymous' group.

upvoted 0 times

...

Elouise

2 months ago

B) Create two Group Include Lists, each with 400 Active Directory groups. Sounds like a good way to keep things organized and easy to maintain.

upvoted 0 times

...

Kimi

2 months ago

A) Create a Group Mapping with 800 groups in the Group Include List. Why reinvent the wheel? Just get it done and move on to the next task!

upvoted 0 times

Frankie

21 days ago

A) Agreed, let's keep it simple and efficient by creating a Group Mapping with 800 groups.

upvoted 0 times

...

Avery

22 days ago

C) No need to complicate things, just create a Group Include List with the 800 Active Directory groups.

upvoted 0 times

...

Gail

25 days ago

B) I think it would be better to create two Group Include Lists, each with 400 Active Directory groups.

upvoted 0 times

...

Jaleesa

27 days ago

A) Create a Group Mapping with 800 groups in the Group Include List.

upvoted 0 times

...

Katina

2 months ago

D) Create two Group Mappings, each with 400 groups in the Group Include List. Splitting it up might make it easier to manage and troubleshoot later on.

upvoted 0 times

...