Posting to eliminate all doubt.
I can find three options from directly quoting the website:
"Kerberos SSO—The firewall first tries SSO authentication. If that fails, it falls back to the specified authentication Type."
"External authentication or local database authentication—The firewall prompts the user to enter login credentials, and uses an external service or local database to authenticate the user."
"Select the Type of authentication service.
...
If you select Cloud Authentication Service, configure a Cloud Identity Engine instance to communicate with the firewall."
Reference: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
A and C should be no doubt since they are mentioned in the PAN doc.
However, under the same doc --> SAML(https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/saml#id111aea26-0c56-4499-8a26-ea2ee8f43639)
It mentioned the PingFederate, which is the PingID.
Voting for ACE. PingID is one of the MFA platforms palo firewall and panorama can integrate with. Kerberos and cloud authentication service are the external services that firewall can use to authenticate along with local authentication.
Agreeing with earlier votes. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
It's ABC; PingID is a valid MFA option: "For end-user authentication via Authentication Policy, the firewall directly integrates with several MFA platforms (Duo v2, Okta Adaptive, PingID, and RSA SecurID), as well as integrating through RADIUS or SAML for all other MFA platforms."https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/multi-factor-authentication#idbc927952-a47e-4bec-ab80-0605a47b4873
Not sure why everyone is giving different answers. It's also true many questions are wrongly answered here
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/multi-factor-authentication#idbc927952-a47e-4bec-ab80-0605a47b4873
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
examtopicstroilevw
7 months ago0d2fdfa
11 months, 3 weeks agoYL123
1 year, 1 month agoMarshpillowz
1 year, 3 months agoJRKhan
1 year, 3 months agoMetgatz
1 year, 4 months agoMetgatz
1 year, 4 months agowallaka
1 year, 6 months agoalinio11
1 year, 7 months agocertprep2021
2 years, 1 month agonotsosavyy
2 years agoNawda
1 year, 7 months agokewokil120
2 years, 1 month agoDenskyDen
2 years, 2 months agodjedeen
2 years, 3 months agoevdw
2 years, 4 months agoCOBrien
2 years, 4 months agoKaspinas
2 years, 4 months ago