2.1 Implement Authentication Roles, Profiles, and Sequences NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · medium

   How are authentication roles assigned to administrators in PAN-OS?

   • ABy adding the administrator to an authentication sequence
   • BBy selecting a role when creating or editing an administrator account
   • CBy setting the role in the local user database
   • DBy configuring the authentication profile
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   What is the purpose of an authentication sequence in PAN-OS?

   • ATo define the permissions of an administrator
   • BTo store user credentials for authentication
   • CTo specify the authentication method for a user
   • DTo define the order in which authentication profiles are attempted for a user
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   Which of the following is NOT a valid authentication method for an authentication profile in PAN-OS?

   • AKerberos
   • BRADIUS
   • CLDAP
   • DLocal database
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   A large enterprise uses SAML for admin authentication. The security team wants to grant the 'network' read-write role to a specific SAML group, but only if the user is also a member of a second SAML group. The IdP does not support nested group membership. What is the most effective way to enforce this requirement?

   • ACreate two separate authentication profiles, one for each group, and add them to an authentication sequence.
   • BCreate a custom authentication role that requires both group memberships and map it to the SAML profile.
   • CAssign the 'network' read-write role to both groups individually and rely on the firewall to enforce the intersection.
   • DConfigure the SAML IdP to send a combined group attribute that includes users who are members of both groups, then map this combined group to the role.
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   What is a benefit of integrating external authentication servers for administrative access?

   • AIt eliminates the need for authentication profiles
   • BIt guarantees that authentication will never fail
   • CIt provides centralized user management across multiple firewalls
   • DIt automatically assigns the correct role to each administrator
   Reveal Solution Discussion Select an answer first