nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #489

PCNSE Question #489: Real Exam Question with Answer & Explanation

The correct answer is C: SCEP. If you have a Simple Certificate Enrollment Protocol (SCEP) server in your enterprise PKI, you can configure a SCEP profile to automate the generation and distribution of unique client https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certificate-management/obtain- certi

Submitted by ngozi_ng· Apr 18, 2026Deploy and Configure

Question

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

Options

  • ASSL/TLS Service profile
  • BCertificate profile
  • CSCEP
  • DOCSP Responder

Explanation

If you have a Simple Certificate Enrollment Protocol (SCEP) server in your enterprise PKI, you can configure a SCEP profile to automate the generation and distribution of unique client https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certificate-management/obtain- certificates/deploy-certificates-using-scep

Topics

#GlobalProtect#Client Certificates#SCEP#Certificate Management

Community Discussion

No community discussion yet for this question.

Full PCNSE PracticeBrowse All PCNSE Questions