Which three types of authentication services can be used to authenticate user traffic flowing through the firewall's data plane? (Choose three.)

The correct answer is A. SAML 2.0 B. Kerberos D. TACACS+. On Palo Alto Networks firewalls, Authentication Policy enforces user authentication for traffic flowing through the data plane. The supported authentication service types for this purpose are SAML 2.0 (A), Kerberos (B), and TACACS+ (D). TACACS (C, without the '+') is the older…

Submitted by fernanda_arg· Apr 18, 2026Configure

Question

Options

ASAML 2.0
BKerberos
CTACACS
DTACACS+
ESAML 1.0

How the community answered

(29 responses)

A
90% (26)
C
7% (2)
E
3% (1)

Explanation

On Palo Alto Networks firewalls, Authentication Policy enforces user authentication for traffic flowing through the data plane. The supported authentication service types for this purpose are SAML 2.0 (A), Kerberos (B), and TACACS+ (D). TACACS (C, without the '+') is the older, less secure predecessor to TACACS+ and is not supported. SAML 1.0 (E) is also not supported - only SAML 2.0 is. TACACS+ and SAML 2.0 are also commonly used for management-plane access, but the question specifically targets data-plane user traffic authentication.

Topics

#Authentication Protocols#Data Plane#User Authentication#Firewall Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice