A remote administrator needs access to the firewall on an untrust interface. Which three options would you configure on an Interface Management profile to secure management access? (Choose three.)

The correct answer is A. Permitted IP Addresses B. SSH C. https. An Interface Management Profile controls which services and source IPs are permitted to access firewall management on a specific interface. When securing management access on an untrusted (internet-facing) interface, you must restrict the protocols to only secure options and…

Submitted by valeria.br· Apr 18, 2026Deploy and Configure

Question

Options

APermitted IP Addresses
BSSH
Chttps
DUser-ID
EHTTP

How the community answered

(29 responses)

A
83% (24)
D
7% (2)
E
10% (3)

Explanation

An Interface Management Profile controls which services and source IPs are permitted to access firewall management on a specific interface. When securing management access on an untrusted (internet-facing) interface, you must restrict the protocols to only secure options and limit access to known IP addresses. SSH (B) and HTTPS (C) are the only secure remote management protocols-HTTP (E) transmits credentials in cleartext and should never be enabled on an untrust interface. Permitted IP Addresses (A) is a critical security control that whitelists specific management hosts, preventing unauthorized access from any other source. User-ID (D) is an identity-mapping service unrelated to restricting management plane access.

Topics

#Interface Management Profiles#Secure Management Access#Remote Access#Security Best Practices

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice