Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 45

Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall's data plane?

Answer options

• A. Kerberos user
• B. SAML user
• C. local database user
• D. local user

Correct answer: D

Explanation

The correct answer is D, as local user accounts do not have the capability to authenticate traffic in the data plane. In contrast, Kerberos and SAML users are designed for authentication processes, and local database users utilize a specific database for authentication, allowing them to manage user traffic effectively.