Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 1

Which three authentication services can an administrator use to authenticate admins into the Palo Alto Networks NGFW without defining a corresponding admin account on the local firewall? (Choose three.)

Answer options

• A. Kerberos
• B. PAP
• C. SAML
• D. TACACS+
• E. RADIUS
• F. LDAP

Correct answer: C, D, E

Explanation

SAML, TACACS+, and RADIUS are designed to work with external identity providers, allowing for authentication without local accounts. In contrast, Kerberos, PAP, and LDAP do not support this feature in the same way, as they either require local setup or do not integrate seamlessly for admin authentication in this context.