PCNSA · Question #222
What are three valid ways to map an IP address to a username? (Choose three.)
The correct answer is A. using the XML API C. a user connecting into a GlobalProtect gateway using a GlobalProtect Agent D. usernames inserted inside HTTP Headers. User-ID supports multiple IP-to-username mapping methods. The XML API (A) allows external systems to push mappings directly to the firewall. A GlobalProtect Agent connection (C) authenticates the user during VPN login and registers that mapping. Usernames embedded in HTTP…
Question
What are three valid ways to map an IP address to a username? (Choose three.)
Options
- Ausing the XML API
- BDHCP Relay logs
- Ca user connecting into a GlobalProtect gateway using a GlobalProtect Agent
- Dusernames inserted inside HTTP Headers
- EWildFire verdict reports
How the community answered
(66 responses)- A91% (60)
- B6% (4)
- E3% (2)
Explanation
User-ID supports multiple IP-to-username mapping methods. The XML API (A) allows external systems to push mappings directly to the firewall. A GlobalProtect Agent connection (C) authenticates the user during VPN login and registers that mapping. Usernames embedded in HTTP headers (D), such as those inserted by proxies or load balancers, can also be parsed for mapping. DHCP Relay logs (B) provide IP lease info but not usernames - DHCP snooping logs are a source, not relay logs. WildFire verdict reports (E) relate to malware analysis, not user mapping.
Topics
Community Discussion
No community discussion yet for this question.