What are three valid method of user mapping? (Choose three)

The correct answer is A. Syslog B. XML API E. Server Monitoring. PAN-OS User-ID maps IP addresses to usernames through several mechanisms. Syslog (A) is valid - the User-ID agent can parse syslog messages from devices like wireless controllers or VPNs to extract login events. XML API (B) is valid - third-party applications can push user-to-IP

Submitted by chen.hong· Apr 18, 2026Deploy and Configure

Question

Options

ASyslog
BXML API
C802.1X
DWildFire
EServer Monitoring

How the community answered

(50 responses)

A
86% (43)
C
6% (3)
D
8% (4)

Explanation

PAN-OS User-ID maps IP addresses to usernames through several mechanisms. Syslog (A) is valid - the User-ID agent can parse syslog messages from devices like wireless controllers or VPNs to extract login events. XML API (B) is valid - third-party applications can push user-to-IP mappings directly to the firewall via the PAN-OS XML API. Server Monitoring (E) is valid - the User-ID agent monitors Active Directory and Exchange servers for security event logs to detect user logins. 802.1X (C) is an authentication standard, not a User-ID mapping method itself (though a RADIUS server using 802.1X can feed into syslog or XML API). WildFire (D) is Palo Alto's cloud-based threat analysis sandbox - it has no role in user identity mapping.

Topics

#User Mapping#User-ID#Identity Management#Firewall Features

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice