Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 267

What can an engineer use with GlobalProtect to assign user-specific client certificates to each GlobalProtect user?

Answer options

• A. SCEP
• B. SSL/TLS Service profile
• C. OCSP Responder
• D. Certificate profile

Correct answer: A

Explanation

The correct answer is A, SCEP, as it allows for the automated issuance of client certificates to users based on their identity. The other options, while related to security and certificates, do not provide the same capability for user-specific certificate assignment as SCEP does.