nerdexam
Palo_Alto_Networks

PCNSE · Question #634

Which three authentication types can be used to authenticate users? (Choose three.)

The correct answer is A. Local database authentication B. PingID C. Kerberos single sign-on. Palo Alto Networks supports several authentication types within Authentication profiles: Local Database (A) uses credentials stored locally on the firewall or Panorama; PingID (B) is a supported cloud-based MFA and identity provider; and Kerberos single sign-on (C) allows…

Submitted by layla.eg· Apr 18, 2026Deploy and Configure

Question

Which three authentication types can be used to authenticate users? (Choose three.)

Options

  • ALocal database authentication
  • BPingID
  • CKerberos single sign-on
  • DGlobalProtect client
  • ECloud authentication service

How the community answered

(17 responses)
  • A
    94% (16)
  • E
    6% (1)

Explanation

Palo Alto Networks supports several authentication types within Authentication profiles: Local Database (A) uses credentials stored locally on the firewall or Panorama; PingID (B) is a supported cloud-based MFA and identity provider; and Kerberos single sign-on (C) allows transparent authentication using existing Kerberos tickets in an Active Directory environment. GlobalProtect (D) is a VPN client application - it uses authentication profiles but is not itself an authentication type. Cloud Authentication Service (E) is a valid auth type on some platforms, but the three specifically called out as correct here are A, B, and C.

Topics

#Authentication Types#Identity Management#Multi-Factor Authentication#Single Sign-On

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice