View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam

Palo Alto Next-Generation Firewall Engineer Exam Materials - Question #58 Discussion

Comment Image Comment Image Comment Image

When considering the various methods for User-ID to learn user-to-IP address mappings, which source is considered the most accurate due to the mapping being explicitly created through an authentication event directly with the firewall? (Choose one answer)

  • A. X-Forwarded-For (XFF) headers
  • B. Server monitoring
  • C. GlobalProtect
  • D. Authentication Portal
Correct Answer: C

Brave-Dump Community Votes

Answer: C (2 votes) 50%
Answer: D (2 votes) 50%

Community Explanations & Comments (4)

Anonymous User 3 months ago
Selected: C
It should be C
D is an option, but it's not the "most accurate", according to this article: https://docs.paloaltonetworks.com/ngfw/administration/user-id/user-id-concepts/user-mapping/authentication-policy-and-captive-portal
Brave-Dumps.com Admin 3 months ago
you are Right, thanks
Brave-Dumps.com Admin 3 months ago
Selected: C
C is the correct
Anonymous User 3 months ago
Selected: D
I think D because key point "Authentication event direct with the firewall".
GlobalProect I think can authen via other authen server such as SAML.
Anonymous User 1 month ago
Selected: D
Answer is D.

GlobalProtect Also creates highly accurate user-to-IP mappings, but the exam wording specifically mentioned an authentication event directly with the firewall. In Palo Alto training material, Authentication Portal is typically cited as the most accurate because the user authenticates directly to the firewall.