Correct Answer: A,B,E
Explanation/Reference:
A: To obtain user mappings from existing network services that authenticate users-such as wireless controllers, 802.1x devices, Apple Open Directory servers, proxy servers, or other Network Access Control (NAC) mechanisms- Configure User-ID to Receive User Mappings from a Syslog Sender.
B: For other clients that you can't map using the preceding methods, you can Send User Mappings to User-ID Using the XML API.
E: Configure User Mapping Using the PAN-OS Integrated User-ID Agent
Define the servers the firewall should monitor to collect IP address-to-user mapping information.
1. Select Device > User Identification > User Mapping.
2. In the Server Monitoring section of the screen, click Add.
Etc.
References:
https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/user-id/map-ip-addresses-to-users
https://www.paloaltonetworks.com/documentation/61/pan-os/pan-os/user-id/configure-user-mapping-using- the-pan-os-integrated-user-id-agent.html