Which administrative authentication method supports authorization by an external service?

The correct answer is C. RADIUS. RADIUS supports both authentication and authorization by an external service. On Palo Alto Networks firewalls, RADIUS can return Vendor-Specific Attributes (VSAs) - specifically the PAN-OS VSA 'PAN-Admin-Role' - that assign administrator role profiles defined on the external…

Submitted by emma.c· Apr 18, 2026Deploy and Configure

Question

Options

ACertificates
BLDAP
CRADIUS
DSSH keys

How the community answered

(21 responses)

B
5% (1)
C
90% (19)
D
5% (1)

Explanation

RADIUS supports both authentication and authorization by an external service. On Palo Alto Networks firewalls, RADIUS can return Vendor-Specific Attributes (VSAs) - specifically the PAN-OS VSA 'PAN-Admin-Role' - that assign administrator role profiles defined on the external RADIUS server. This means the firewall delegates the authorization decision (what the admin is allowed to do) to the RADIUS server. LDAP can authenticate users but delegates role assignment back to a local admin role. Certificates and SSH keys are authentication-only mechanisms; they verify identity but have no mechanism to carry authorization data from an external source.

Topics

#Authentication#Authorization#RADIUS#Administrative Access

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice