Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam NGFW-Engineer Topic 2 Question 97 Discussion

Actual exam question for Palo Alto Networks's NGFW-Engineer exam
Question #: 97
Topic #: 2
What must be configured before a firewall administrator can define policy rules based on users and groups?

Suggested Answer: D Vote an answer

Basic Concept: User- and group-based Security policy requires the firewall to retrieve group membership from a directory. The LDAP server profile defines how PAN-OS connects to that directory source.
Why D is Correct: The LDAP Server profile is required first because group mapping and user/group selection depend on a working LDAP connection to the directory.
Why A is Wrong: User Mapping profile is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why B is Wrong: Authentication profile is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why C is Wrong: Group mapping settings is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.

by Benson at Jun 07, 2026, 03:34 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.