NGFW-Engineer PAN OS Device Setting Configuration Practice Question
You are configuring a Palo Alto Networks firewall to support User-ID. You have successfully installed the User-ID agent on a Windows Server and connected it to the firewall. However, the firewall is not mapping IP addresses to usernames. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The firewall is not configured with a Server Monitoring entry under Device > User Identification > User-ID Agents.
The firewall requires a server monitoring configuration to be defined for the specific domain controller or server being monitored by the agent.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The App-ID database has not been updated to support Windows Server 2022.
Why it's wrong here
App-ID updates do not govern basic User-ID mapping functionality.
- ✗
The User-ID agent needs to be configured with a static XML API key.
Why it's wrong here
While API keys exist, they are not a prerequisite for basic agent-to-firewall mapping connectivity.
- ✗
The Zone Protection profile is blocking the User-ID protocol.
Why it's wrong here
Zone Protection profiles protect against DoS/flood attacks and would not typically block agent-firewall control traffic.
- ✓
The firewall is not configured with a Server Monitoring entry under Device > User Identification > User-ID Agents.
Why this is correct
Without the Server Monitoring entry, the firewall will not know which agent to query for logs or map IPs to users.
About these practice questions
This NGFW-Engineer question is part of Courseiva's 190-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NGFW-Engineer practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NGFW-Engineer exam.