Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 398

Which source is the most reliable for collecting User-ID user mapping?

Answer options

• A. Microsoft Active Directory
• B. Microsoft Exchange
• C. GlobalProtect
• D. Syslog Listener

Correct answer: C

Explanation

GlobalProtect is the most reliable source for collecting User-ID user mapping because it integrates directly with the network and provides accurate user authentication data. Microsoft Active Directory and Microsoft Exchange can provide user information, but they are not specifically designed for User-ID mapping. A Syslog Listener captures logs from various sources but does not inherently provide real-time user mapping.