Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 387

Which three external services perform both authentication and authorization for administration of firewalls? (Choose three.)

Answer options

• A. Kerberos
• B. TACACS+
• C. SAML
• D. Radius
• E. LDAP

Correct answer: B, C, D

Explanation

TACACS+, SAML, and Radius are all capable of handling both authentication and authorization, making them suitable for firewall administration. Kerberos is primarily an authentication protocol, while LDAP is mainly used for directory services and does not inherently provide authorization.