Accredited Configuration Engineer (ACE) — Question 2

Which of the following can provide information to a Palo Alto Networks firewall for the purposes of UserID?

Answer options

• A. Domain Controller
• B. SSL Certificates
• C. RIPv2
• D. Network Access Control (NAC) device

Correct answer: A, B, D

Explanation

The correct options are A, B, and D because a Domain Controller can provide user authentication data, SSL Certificates can be used for secure identification, and a NAC device can supply information about user access rights. Option C, RIPv2, is a routing protocol and does not provide user identification information.