nerdexam
Palo_Alto_Networks

PCNSE · Question #649

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the authentication…

The correct answer is D. The firewall evaluates the profiles in top-to-bottom order until one Authentication profile. When user or administrative access is configured, one or more authentication methods must be specified. A user or administrator definition typically requires an Authentication Profile that specifies the desired authentication method. When more than one method is desired, you…

Submitted by akirajp· Apr 18, 2026Deploy and Configure

Question

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the authentication sequence, based on the Authentication profiles in the order Kerberos, LDAP, and TACACS+?

Options

  • AThe priority assigned to the Authentication profile defines the order of the sequence.
  • BThe firewall evaluates the profiles in the alphabetical order the Authentication profiles have been
  • CIf the authentication times out for the first Authentication profile in the authentication sequence, no
  • DThe firewall evaluates the profiles in top-to-bottom order until one Authentication profile

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    94% (34)

Explanation

When user or administrative access is configured, one or more authentication methods must be specified. A user or administrator definition typically requires an Authentication Profile that specifies the desired authentication method. When more than one method is desired, you can instead use an Authentication Sequence, which is a list of Authentication Profiles. The first profile will be accessed. If it is not available, the next option will be tried. An Authentication Profile specifies a single Server Profile. A Server Profile contains specific configuration and access information that is necessary to reach the external authentication service.

Topics

#External Authentication#Authentication Profile Sequence#Firewall Authentication Logic#Authentication Protocols

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice