View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam


Palo Alto Next-Generation Firewall Engineer Exam Materials-Question 58 Discussion
Comment Image Comment Image Comment Image

When considering the various methods for User-ID to learn user-to-IP address mappings, which source is considered the most accurate due to the mapping being explicitly created through an authentication event directly with the firewall? (Choose one answer)

  • A. X-Forwarded-For (XFF) headers
  • B. Server monitoring
  • C. GlobalProtect
  • D. Authentication Portal
Correct Answer: C

Brave-Dump Clients Votes

C 50%
D 50%

Comments



Anonymous User 2026-07-08 22:47:06

Selected Answers: C


It should be C
D is an option, but it's not the "most accurate", according to this article: https://docs.paloaltonetworks.com/ngfw/administration/user-id/user-id-concepts/user-mapping/authentication-policy-and-captive-portal
  • Brave-Dumps.com Admin 2026-07-08 23:52:57
    you are Right, thanks

Brave-Dumps.com Admin 2026-07-08 23:53:16

Selected Answers: C


C is the correct

Anonymous User 2026-07-28 18:53:03

Selected Answers: D


I think D because key point "Authentication event direct with the firewall".
GlobalProect I think can authen via other authen server such as SAML.

Anonymous User 2026-09-25 19:11:31

Selected Answers: D


Answer is D.

GlobalProtect Also creates highly accurate user-to-IP mappings, but the exam wording specifically mentioned an authentication event directly with the firewall. In Palo Alto training material, Authentication Portal is typically cited as the most accurate because the user authenticates directly to the firewall.