What are three valid ways to map an IP address to a username? (Choose three.)
What are three valid ways to map an IP address to a username? (Choose three.)
One valid way to map an IP address to a username is through a user connecting to a GlobalProtect gateway using a GlobalProtect Agent, as this process typically involves user authentication and IP address assignment. Another valid method involves using DHCP Relay logs, where the DHCP server can provide information about which user was assigned a particular IP address. Lastly, using the XML API is a valid approach because it allows for programmatic mapping of IP addresses to usernames, facilitating integration with various systems and data sources. HTTP headers containing usernames do not provide direct IP-to-user mapping within networking or security systems context, and WildFire verdict reports primarily focus on threat intelligence rather than user identification.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users
Correct.
This is a tricky question, because the insertion of Username in HTTP Headers is mean to allow other devices in your network (not my FW) can identify the user and enforce user-based policy. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users
disagree - please reference https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-web-interface-help/panorama-web-interface/panorama-administrators For each access domain (up to 25) you want to assign to the administrator, Add an Access Domain from the drop-down (see Panorama > Access Domains) and then click the adjacent Admin Role cell and select a custom Device Group and Template administrator role from the drop-down (see Panorama > Managed Devices > Summary). When administrators with access to more than one domain log in to Panorama, an Access Domain drop-down appears in the footer of the web interface. Administrators can select any assigned Access Domain to filter the monitoring and configuration data that Panorama displays. The Access Domain selection also filters the firewalls that the Context drop-down displays.
you're confusing what the question is asking. Username mapping to IP addressing falls under USER-ID I recommend you review this document: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users