PCNSE Question #634: Real Exam Question with Answer & Explanation

The correct answer is A: Local database authentication. Palo Alto Networks supports several authentication types within Authentication profiles: Local Database (A) uses credentials stored locally on the firewall or Panorama; PingID (B) is a supported cloud-based MFA and identity provider; and Kerberos single sign-on (C) allows transpa

Submitted by layla.eg· Apr 18, 2026Deploy and Configure

Question

Which three authentication types can be used to authenticate users? (Choose three.)

Options

ALocal database authentication
BPingID
CKerberos single sign-on
DGlobalProtect client
ECloud authentication service

Explanation

Palo Alto Networks supports several authentication types within Authentication profiles: Local Database (A) uses credentials stored locally on the firewall or Panorama; PingID (B) is a supported cloud-based MFA and identity provider; and Kerberos single sign-on (C) allows transparent authentication using existing Kerberos tickets in an Active Directory environment. GlobalProtect (D) is a VPN client application - it uses authentication profiles but is not itself an authentication type. Cloud Authentication Service (E) is a valid auth type on some platforms, but the three specifically called out as correct here are A, B, and C.

Topics

#Authentication Types#Identity Management#Multi-Factor Authentication#Single Sign-On

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice Browse All PCNSE Questions