Which of the following is NOT a method used by Identity Awareness for acquiring identity?

RADIUS Accounting is a supported Identity Awareness source where the gateway receives RADIUS accounting start/stop messages containing user-to-IP mappings from a RADIUS server.

Active Directory Query (AD Query) is a primary Identity Awareness method that reads Windows Security Event logs from AD domain controllers to correlate authenticated users with IP addresses.

Remote Access via the Identity Agent is a supported method where an endpoint agent reports the logged-in user's identity directly to the Security Gateway.

Certificates are used for device or user authentication in contexts like VPN or HTTPS inspection but are not a supported Identity Awareness identity acquisition source. Identity Awareness specifically maps IP addresses to user identities using sources such as AD Query, Browser-Based Authentication, Identity Agents, and RADIUS Accounting - none of which rely on certificate-based identity collection.