nerdexam
Palo_Alto_Networks

PCNSE · Question #489

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

The correct answer is C. SCEP. If you have a Simple Certificate Enrollment Protocol (SCEP) server in your enterprise PKI, you can configure a SCEP profile to automate the generation and distribution of unique client https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certificate-management/obtain…

Submitted by ngozi_ng· Apr 18, 2026Deploy and Configure

Question

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

Options

  • ASSL/TLS Service profile
  • BCertificate profile
  • CSCEP
  • DOCSP Responder

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    9% (2)
  • C
    87% (20)

Explanation

If you have a Simple Certificate Enrollment Protocol (SCEP) server in your enterprise PKI, you can configure a SCEP profile to automate the generation and distribution of unique client https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certificate-management/obtain- certificates/deploy-certificates-using-scep

Topics

#GlobalProtect#Client Certificates#SCEP#Certificate Management

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice