nerdexam
Palo_Alto_Networks

PCNSE7 · Question #120

In an enterprise deployment, a network security engineer wants to assign rights to a group of administrators without creating local administrator accounts on the firewall. Which authentication…

The correct answer is C. Certificate-based authentication. As a more secure alternative to password-based authentication to the Panorama web interface, you can configure certificate-based authentication for administrator accounts that are local to Panorama. Certificate- based authentication involves the exchange and verification of a…

Configure and Deploy

Question

In an enterprise deployment, a network security engineer wants to assign rights to a group of administrators without creating local administrator accounts on the firewall. Which authentication method must be used?

Options

  • AKerberos
  • BRADlUS with Vendor-Specific Attributes
  • CCertificate-based authentication
  • DLDAP

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    82% (23)
  • D
    11% (3)

Explanation

As a more secure alternative to password-based authentication to the Panorama web interface, you can configure certificate-based authentication for administrator accounts that are local to Panorama. Certificate- based authentication involves the exchange and verification of a digital signature instead of a password. panorama/configure-a-panorama-administrator-with-certificate-based-authentication-for-the-web-

Topics

#administrator authentication#certificate-based auth#role-based access#external auth

Community Discussion

No community discussion yet for this question.

Full PCNSE7 Practice