Basic Concept: User- and group-based Security policy requires the firewall to retrieve group membership from a directory. The LDAP server profile defines how PAN-OS connects to that directory source.
Why D is Correct: The LDAP Server profile is required first because group mapping and user/group selection depend on a working LDAP connection to the directory.
Why A is Wrong: User Mapping profile is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why B is Wrong: Authentication profile is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Why C is Wrong: Group mapping settings is a valid Palo Alto Networks or networking concept in another context, but it does not implement the exact configuration outcome required by this question.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit