Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 384

What is a correct statement regarding administrative authentication using external services with a local authorization method?

The administrative accounts you define on an external authentication server serve as references to the accounts defined locally on the firewall.

Prior to PAN-OS 10.2, an administrator used the firewall to manage role assignments, but access domains have not been supported by this method.

Starting with PAN-OS 10.2, an administrator needs to configure Cloud Identity Engine to use external authentication services for administrative authentication.

The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external authentication server.

Correct Answer: D

The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external authentication server. This ensures that if the external authentication server is unavailable, the local accounts can still be used for authentication purposes.

Discussion

CCIE5592Option: D

The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external Multi-Factor Authentication, SAML, Kerberos, TACACS+, RADIUS, or LDAP server. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-authentication

happyismOption: D

D is correct; 10.2 does not seem to have changed this method. Cloud Identity Engine, for knowledge: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/identity-features/cloud-identity-engine By using a cloud-based solution, you can reallocate the resources required for authentication from the firewall or Panorama to the cloud. The Cloud Authentication Service also allows you to configure the authentication source once instead of for each authentication method you use (for example, Authentication Portal or administrator authentication). https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-authentication

joquin0020Option: A

I hate this kind of question. It's like what was first, the egg or the chicken?.

DenskyDenOption: D

D. 100 percent!

TAKUM1yOption: D

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-authentication

confusionOption: D

D for sure

jeremykebirOption: D

D. The administrative accounts you define locally on the firewall serve as references to the accounts defined on an external authentication server. This statement is true. When configuring external authentication on a Palo Alto Networks firewall, the local administrative accounts defined on the firewall can act as fallback references. If the external authentication server is unavailable or authentication fails, the firewall can fall back to using the locally defined administrative accounts for authentication.

MarshpillowzOption: D

D is correct