Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

User-to-IP address mapping can be populated through several methods. The XML API allows external systems to programmatically push user mappings to the firewall, which is useful for integrating with non-standard or custom authentication systems. Captive Portal is another method where the firewall presents a web form to unauthenticated users, capturing their credentials and creating a user-to-IP mapping upon successful login. Both are distinct, documented methods for populating the User-ID mapping table on a PAN-OS device.

C. User-ID is the name of the overall feature that enables user-based policy, not a specific method for populating mappings itself. Methods like the User-ID agent or Captive Portal are components of the User-ID feature.
D. SCP (Secure Copy Protocol) is a file transfer protocol. While syslog parsing is a valid method for User-ID, SCP is not used for log ingestion to create user mappings.

1. Palo Alto Networks. (2023). PAN-OS® Administrator’s Guide, Release 11.0. User-ID Concepts. In the section "Methods for Mapping Users to IP Addresses," both "Captive Portal" and "XML API" are listed as distinct methods.

2. Palo Alto Networks. (2023). PAN-OS® XML API Reference Guide, Release 11.0. The guide details the operational command, which is used to register or unregister user-to-IP address mappings.