NGFW-Engineer PAN OS Device Setting Configuration Practice Question
You want to implement User-ID without installing agents on every server. What is the most efficient method to map IP addresses to usernames?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Agentless User-ID via Server Monitoring
The Palo Alto Networks firewall can leverage User-ID agents or agentless methods like querying Active Directory domain controllers via WMI or Syslog.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use IP-to-User static mapping
Why it's wrong here
Static mapping is not scalable for dynamic IP environments.
- ✗
Enable GlobalProtect for internal users
Why it's wrong here
While it provides user mapping, it is an over-engineered solution for internal-only mapping.
- ✓
Configure Agentless User-ID via Server Monitoring
Why this is correct
Agentless User-ID allows the firewall to poll domain controllers directly using WMI or WinRM.
- ✗
Use the User-ID Agent on a Windows Server
Why it's wrong here
This requires installing software, which the prompt specifically aims to avoid.
About these practice questions
One of 190 original NGFW-Engineer practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NGFW-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NGFW-Engineer exam.