PCNSE · Question #631
An administrator wants to enable Palo Alto Networks cloud services for Device Telemetry and IoT. Which type of certificate must be installed?
The correct answer is C. Device certificate. Palo Alto Networks cloud-connected services - including Device Telemetry, IoT Security, and other cloud subscriptions - require a Device Certificate to authenticate the firewall to the Palo Alto Networks cloud infrastructure. This certificate is provisioned per device and…
Question
An administrator wants to enable Palo Alto Networks cloud services for Device Telemetry and IoT. Which type of certificate must be installed?
Options
- AExternal CA certificate
- BServer certificate
- CDevice certificate
- DSelf-signed root CA certificate
How the community answered
(25 responses)- A4% (1)
- C88% (22)
- D8% (2)
Explanation
Palo Alto Networks cloud-connected services - including Device Telemetry, IoT Security, and other cloud subscriptions - require a Device Certificate to authenticate the firewall to the Palo Alto Networks cloud infrastructure. This certificate is provisioned per device and uniquely identifies it to cloud services. External CA certificates, self-signed root CA certificates, and server certificates serve different purposes (trust anchors, internal PKI, inbound TLS termination) and cannot fulfill the cloud service authentication requirement.
Topics
Community Discussion
No community discussion yet for this question.