nerdexam
Palo_Alto_Networks

NGFW-ENGINEER · Question #79

A network administrator needs to replace the default self-signed certificate on a firewall with one signed by the company's internal certificate authority (CA). Which two firewall features would…

The correct answer is A. User-ID agent redistribution C. Authentication portal. User-ID agent redistribution uses SSL/TLS for secure communication between the firewall and User-ID agents, which requires a certificate assigned via an SSL/TLS service profile, and the Authentication Portal uses HTTPS for user authentication interactions, which also depends on…

Authentication and User-ID

Question

A network administrator needs to replace the default self-signed certificate on a firewall with one signed by the company's internal certificate authority (CA). Which two firewall features would require this new certificate to be assigned via an SSL/TLS service profile? (Choose two.)

Options

  • AUser-ID agent redistribution
  • BRADIUS server authentication
  • CAuthentication portal
  • DGlobalProtect gateway

How the community answered

(29 responses)
  • A
    72% (21)
  • B
    10% (3)
  • D
    17% (5)

Explanation

User-ID agent redistribution uses SSL/TLS for secure communication between the firewall and User-ID agents, which requires a certificate assigned via an SSL/TLS service profile, and the Authentication Portal uses HTTPS for user authentication interactions, which also depends on a certificate provided through an SSL/TLS service profile.

Topics

#Certificate Management#SSL/TLS Service Profiles#Authentication Portal#User-ID

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice