Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 491

Which two components are required to configure certificate-based authentication to the web UI when an administrator needs firewall access on a trusted interface? (Choose two.)

Answer options

Correct answer: B, D

Explanation

The correct components for configuring certificate-based authentication are the CA certificate, which verifies the identity of the certificate authority, and the Certificate Profile, which defines the settings for the certificates used. The Server certificate is not required for this specific setup, and the SSL/TLS Service Profile is related to secure connections but does not pertain directly to certificate-based authentication.