Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 526

What can you use with GlobalProtect to assign user-specific client certificates to each GlobalProtect user?

Answer options

• A. CSP Responder
• B. Certificate profile
• C. SCEP
• D. SSL/TLS Service profile

Correct answer: C

Explanation

SCEP (Simple Certificate Enrollment Protocol) is specifically designed to automate the process of issuing client certificates, making it the correct choice for assigning user-specific certificates in a GlobalProtect environment. The other options, while related to security and certificates, do not provide the same functionality for user-specific certificate assignment as SCEP does.