Exam PCNSA All QuestionsBrowse all questions from this exam
Question 356

The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named New_Admin. This new administrator has to authenticate without inserting any username or password to access the WebUI.

What steps should the administrator follow to create the New_Admin Administrator profile?

    Correct Answer: A

    To create a new firewall Local Administrator profile with customized privileges that allows an administrator to authenticate without inserting any username or password to access the WebUI, the following steps should be taken: Set the Authentication profile to Local, select the 'Use only client certificate authentication' check box, and set the role to Role Based. This setup ensures that the new administrator can authenticate using a client certificate instead of entering a username and password, aligning with the requirement for accessing the WebUI without manual authentication.

Discussion
DIG_TofuOption: D

D seems correct. Spaces are allowed in common name, according to RFC 7468. I guess ._.

jaredmcg13Option: A

A is the answer https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-authentication

Kaifus

Soooo many holes in this question.... 1) Common name is an IP or FQDN, not something like New Admin 2) Certificate Name cannot have spaces That alone takes out B, C and D... A doesn't seem right either though given the context of the question. There has to be a certificate loaded on the client machine in order to do what the question is asking.