Free Palo Alto Networks NGFW-Engineer Actual Exam Questions - Question 9 Discussion

B GlobalProtect is designed to directly associate users with their IPs during authentication, making it more accurate than indirect methods like port mapping or syslog.

B for me, GlobalProtect links users and IPs at the source reliably.

Port mapping (A) seems less reliable since IPs can change with sessions, and server monitoring (D) might lag behind real-time mappings. Syslog (C) is mostly just logging, so probably not the most direct method. Could there be a scenario where server monitoring is better?

B/C? GlobalProtect is solid since it ties user login to IP, but Syslog can sometimes catch detail missed elsewhere. Port mapping and server monitoring feel a bit less direct for reliable user-to-IP mapping.

Makes sense to go with B, GlobalProtect, since it handles user authentication and IP assignment directly. Syslog (C) just logs events and can miss real-time mapping accuracy. Port mapping (A) can fluctuate too much depending on traffic, so it’s less dependable. Server monitoring (D) might help but usually isn’t as precise or immediate as GlobalProtect.

It’s B, GlobalProtect is best since it authenticates users before assigning IPs.

Option B. Port mapping seems unreliable since ports change often.