Palo Alto Networks Certified Network Security Engineer Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS? Answer: D. Server Monitoring Why XML API (A) is Not the Answer Here The question explicitly says the wireless device has no native integration. XML API requires device support. So, XML API cannot be used to map IP to user in this scenario. Why Client Probing (C) is Not the Best Answer Can work, but less reliable for wireless clients. Usually used as a fallback method when Server Monitoring isn’t possible.

• Chose C1

  The correct answer is: C. Client Probing Explanation: When users connect through an 802.1x-enabled wireless network device that does not natively integrate with PAN-OS® software, the Client Probing method is used to map IP addresses to usernames. This method involves the firewall sending probes to the client devices to retrieve the username associated with the IP address. It is commonly used in environments where the wireless infrastructure does not directly share user information with the firewall.

• Chose A4

  A is correct In the pcnse study guide : XML API: The PAN-OS XML API is used in cases where standard user mapping methods might not work—for example, as third-party VPNs or 802.1x-enabled wireless networks