NGFW-ENGINEER · Question #85
A government agency needs to ensure that all user web access is explicitly mediated and authenticated. The agency has the following requirements: - Client browsers must be manually configured to…
The correct answer is A. Web proxy in explicit mode with an Authentication policy by using Kerberos. Explicit web proxy mode requires client browsers to be manually configured to send traffic to the firewall’s IP address and port, and integrating it with an Authentication policy using Kerberos enables seamless single sign-on with Active Directory credentials through native…
Question
A government agency needs to ensure that all user web access is explicitly mediated and authenticated. The agency has the following requirements:
- Client browsers must be manually configured to send traffic to the
firewall's IP address and a specific port.
- The firewall must support seamless single sign-on (SSO) with the
users' existing Active Directory credentials. Which feature set should the engineer configure to meet the agency's requirements?
Options
- AWeb proxy in explicit mode with an Authentication policy by using Kerberos
- BDecryption policy that redirects users to a SAML identity provider for authentication
- CWeb proxy in transparent mode with an Authentication policy by using multi-factor authentication
- DUser-ID agent integration with Authentication Portal for authentication
How the community answered
(42 responses)- A71% (30)
- B2% (1)
- C17% (7)
- D10% (4)
Explanation
Explicit web proxy mode requires client browsers to be manually configured to send traffic to the firewall’s IP address and port, and integrating it with an Authentication policy using Kerberos enables seamless single sign-on with Active Directory credentials through native domain authentication without additional user interaction.
Topics
Community Discussion
No community discussion yet for this question.