Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 96

Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP
`"to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.
Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

Answer options

• A. syslog
• B. RADIUS
• C. UID redistribution
• D. XFF headers

Correct answer: A

Explanation

The correct answer is A, syslog, because it allows for easy collection and forwarding of logs from various devices with minimal configuration changes. Options B (RADIUS) and C (UID redistribution) are not as effective in this scenario due to their complexity and potential downtime. Option D (XFF headers) is irrelevant for the required attribution of usernames to IP addresses.