Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 456

A consultant advises a client on designing an explicit Web Proxy deployment on PAN-OS 11.0. The client currently uses RADIUS authentication in their environment.

Which two pieces of information should the consultant provide regarding Web Proxy authentication? (Choose two.)

Answer options

• A. Kerberos or SAML authentication need to be configured.
• B. RADIUS is only supported for a transparent Web Proxy.
• C. RADIUS is not supported for explicit or transparent Web Proxy.
• D. LDAP or TACACS+ authentication need to be configured.

Correct answer: A, C

Explanation

The correct answers are A and C because explicit Web Proxy deployments require either Kerberos or SAML for authentication, while RADIUS is not supported for either explicit or transparent Web Proxy configurations. Option B is incorrect as it suggests RADIUS is limited to transparent proxies only, which is misleading, and option D is incorrect since it mentions LDAP or TACACS+, which are not necessary for this specific context.