Palo Alto Networks System Engineer – Strata — Question 29

Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

Answer options

• A. multi-factor authentication (MFA)
• B. URL Filtering Profiles
• C. WildFire analysis
• D. dynamic user groups (DUGs)

Correct answer: A, B

Explanation

The correct answers are A and B because multi-factor authentication (MFA) adds an extra layer of security by requiring additional verification steps, which can deter unauthorized access even if credentials are stolen. URL Filtering Profiles help in controlling access to potentially harmful websites, thereby reducing the risk of credential theft, while WildFire analysis and dynamic user groups (DUGs) do not directly address the prevention of abuse from stolen credentials.