PCNSE · Question #657
Which three external services perform both authentication and authorization for administration of firewalls? (Choose three.)
The correct answer is B. TACACS+ C. SAML D. Radius. The administrative accounts are defined on an external SAML, TACACS+, or RADIUS server. The server performs both authentication and authorization. For authorization, you define Vendor- Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML…
Question
Which three external services perform both authentication and authorization for administration of firewalls? (Choose three.)
Options
- AKerberos
- BTACACS+
- CSAML
- DRadius
- ELDAP
How the community answered
(41 responses)- A7% (3)
- B90% (37)
- E2% (1)
Explanation
The administrative accounts are defined on an external SAML, TACACS+, or RADIUS server. The server performs both authentication and authorization. For authorization, you define Vendor- Specific Attributes (VSAs) on the TACACS+ or RADIUS server, or SAML attributes on the SAML server. PAN-OS maps the attributes to administrator roles, access domains, user groups, and virtual systems that you define on the firewall. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/manage- firewall-administrators/administrative-authentication
Topics
Community Discussion
No community discussion yet for this question.