Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 20

Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)

Answer options

• A. TACACS+
• B. Kerberos
• C. PAP
• D. LDAP
• E. SAML
• F. RADIUS

Correct answer: A, E, F

Explanation

The correct answers are TACACS+, SAML, and RADIUS because they can be configured to transmit both usernames and role names to the NGFW. In contrast, Kerberos, PAP, and LDAP do not support this dual transmission of information as effectively.