Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 326

An engineer needs to collect User-ID mappings from the company’s existing proxies.

What two methods can be used to pull this data from third party proxies? (Choose two.)

Answer options

• A. Client probing
• B. XFF Headers
• C. Syslog
• D. Server Monitoring

Correct answer: B, C

Explanation

The correct answers are B and C because XFF Headers can provide the original client's IP address when the request passes through a proxy, and Syslog can be configured to send logs that include User-ID mappings. Options A and D are not suitable for collecting User-ID mappings from third-party proxies as they do not typically provide the necessary data in this context.