nerdexam
Palo_Alto_Networks

PCNSE · Question #788

Which two components are required to configure certificate-based authentication to the web UI when an administrator needs firewall access on a trusted interface? (Choose two.)

The correct answer is B. CA certificate D. Certificate Profile. Requirements are CA cert, Cert profile, and Client cert for each admin. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/firewall-administration/manage- firewall-administrators/configure-administrative-accounts-and-authentication/configure-certificate…

Submitted by anna_se· Apr 18, 2026Deploy and Configure

Question

Which two components are required to configure certificate-based authentication to the web UI when an administrator needs firewall access on a trusted interface? (Choose two.)

Options

  • AServer certificate
  • BCA certificate
  • CSSL/TLS Service Profile
  • DCertificate Profile

How the community answered

(25 responses)
  • B
    96% (24)
  • C
    4% (1)

Explanation

Requirements are CA cert, Cert profile, and Client cert for each admin. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/firewall-administration/manage- firewall-administrators/configure-administrative-accounts-and-authentication/configure-certificate- based-administrator-authentication-to-the-web-interface

Topics

#Certificate Authentication#Client Certificates#Firewall Management UI#PAN-OS Profiles

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice