View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam


Palo Alto Next-Generation Firewall Engineer Exam Materials-Question 59 Discussion
Comment Image Comment Image Comment Image

When considering the various methods for User-ID to learn user-to-IP address mappings, which source is considered the most accurate due to the mapping being explicitly created through an authentication event directly with the firewall? (Choose one answer)

  • A. X-Forwarded-For (XFF) headers
  • B. Server monitoring
  • C. GlobalProtect
  • D. Authentication Portal
Correct Answer: C

Brave-Dump Clients Votes

C 66.67%
D 33.33%

Comments



Anonymous User 2026-07-08 22:47:06

Selected Answers: C


It should be C
D is an option, but it's not the "most accurate", according to this article: https://docs.paloaltonetworks.com/ngfw/administration/user-id/user-id-concepts/user-mapping/authentication-policy-and-captive-portal
  • Brave-Dumps.com Admin 2026-07-08 23:52:57
    you are Right, thanks

Brave-Dumps.com Admin 2026-07-08 23:53:16

Selected Answers: C


C is the correct

Anonymous User 2026-07-28 18:53:03

Selected Answers: D


I think D because key point "Authentication event direct with the firewall".
GlobalProect I think can authen via other authen server such as SAML.