PSE-STRATA-PRO-24 Question #16: Real Exam Question with Answer & Explanation

The correct answer is A. XML API C. User-ID. Populating user-to-IP mappings is a critical function for enabling user-based policy enforcement in Palo Alto Networks firewalls. The following two methods are valid ways to populate these The XML API allows external systems to programmatically send user-to-IP mapping information

Question

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

Options

AXML API
BCaptive portal
CUser-ID
DSCP log ingestion

Explanation

Populating user-to-IP mappings is a critical function for enabling user-based policy enforcement in Palo Alto Networks firewalls. The following two methods are valid ways to populate these The XML API allows external systems to programmatically send user-to-IP mapping information to the firewall. This is a highly flexible method, particularly when user information is available from an external system that integrates via the API. This method is commonly used in environments where the mapping data is maintained in a centralized database or monitoring system. User-ID is a core feature of Palo Alto Networks firewalls that allows for the dynamic identification of users and their corresponding IP addresses. User-ID agents can pull this data from various sources, such as Active Directory, Syslog servers, and more. This is one of the most common and reliable methods to maintain user-to-IP mappings.

Community Discussion

No community discussion yet for this question.

Full PSE-STRATA-PRO-24 Practice