PCNSA · Question #371
The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named New_Admin. This new administrator has to authenticate without inserting any username or…
The correct answer is D. 1. Select the "Use only client certificate authentication" check box. To allow a local administrator profile to authenticate without a username or password via the WebUI, client certificate authentication must be enabled.
Question
The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named New_Admin. This new administrator has to authenticate without inserting any username or password to access the WebUI. What steps should the administrator follow to create the New_Admin Administrator profile?
Options
- A
- Set the Authentication profile to Local.
- B
- Select the "Use only client certificate authentication" check box.
- C
- Select the "Use only client certificate authentication" check box.
- D
- Select the "Use only client certificate authentication" check box.
How the community answered
(37 responses)- A5% (2)
- B3% (1)
- C3% (1)
- D89% (33)
Why each option
To allow a local administrator profile to authenticate without a username or password via the WebUI, client certificate authentication must be enabled.
Setting the Authentication profile to Local only specifies that authentication will use local user accounts, but it doesn't inherently enable passwordless access or client certificate authentication.
This option is functionally identical to option D, which is the specified correct answer. The critical part is enabling client certificate authentication.
This option is functionally identical to option D, which is the specified correct answer. The critical part is enabling client certificate authentication.
The option "Use only client certificate authentication" allows an administrator to authenticate to the WebUI solely based on a valid client certificate, bypassing the need for a username and password. This is a common method for passwordless authentication in enterprise environments.
Concept tested: Passwordless client certificate authentication for administrators
Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/authentication/configure-client-certificate-authentication-for-administrators
Topics
Community Discussion
No community discussion yet for this question.