Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Palo Alto Networks logo

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 2Objective 5

2.5 Configure Certificates NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 5)

Part of the PAN-OS Device Setting Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

22questions here
5free pages
6concepts
40%of the exam

Questions 21–22

  1. 21expert · hard

    A company uses client certificates for GlobalProtect authentication. They want to ensure that certificates are checked against a CRL to revoke access for terminated employees. What is the best way to configure this?

    Select an answer first
  2. 22foundation · easy

    Which PAN-OS feature allows the firewall to authenticate users based on certificates presented during SSL/TLS handshake?

    Select an answer first
Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NEXT-GENERATION-FIREWALL-ENGINEER

Keep studying — PAN-OS Device Setting Configuration

Full NEXT-GENERATION-FIREWALL-ENGINEER curriculum →Every domain, objective & concept — with linked practiceNEXT-GENERATION-FIREWALL-ENGINEER exam overview →Palo Alto Networks Certified Next-Generation Firewall Engineer

Other objectives in PAN-OS Device Setting Configuration

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.