2.1 Implement Authentication Roles, Profiles, and Sequences NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   In PAN-OS, what is the relationship between authentication profiles and authentication sequences?

   • AA profile contains multiple sequences
   • BA sequence is a type of authentication profile
   • CThey are interchangeable terms for the same object
   • DA sequence contains multiple authentication profiles in a defined order
   Reveal Solution Discussion Select an answer first
2. 7expert · medium

   A firewall has multiple local admin accounts. The security policy requires that the 'config-admin' account can only view the configuration and cannot make changes, while the 'net-admin' account can modify network settings but not view the configuration. How can this be implemented?

   • AAssign the built-in 'auditor' role to 'config-admin' and the built-in 'superuser' role to 'net-admin'.
   • BCreate two custom authentication roles: one with 'config' read-only permission for 'config-admin', and one with 'network' read-write permission for 'net-admin'.
   • CAssign the built-in 'superuser' role to 'config-admin' and the built-in 'auditor' role to 'net-admin'.
   • DCreate a single custom role with 'config' read-only and 'network' read-write, and assign it to both accounts.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization wants to ensure that if the primary RADIUS server is down, administrators can still log in using the firewall's local database. They have created a RADIUS profile and a local profile. What is the most efficient way to implement this fallback?

   • ACreate two separate admin accounts, one with the RADIUS profile and one with the local profile, and instruct admins to use the local account if RADIUS fails.
   • BAssign the RADIUS profile to the admin accounts and configure the local profile as a 'fallback' in the RADIUS profile settings.
   • CConfigure the RADIUS profile to use the local database as a backup server.
   • DCreate an authentication sequence with the RADIUS profile first and the local profile second, then assign the sequence to the admin accounts.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   What is the primary benefit of using role-based access control (RBAC) for administrators?

   • AIt simplifies authentication by using a single shared password
   • BIt ensures all administrators have full access to all features
   • CIt eliminates the need for authentication profiles
   • DIt enforces least-privilege access by assigning roles based on job requirements
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   What is the purpose of grouping multiple authentication profiles into a sequence?

   • ATo provide fallback options if the primary authentication method fails
   • BTo combine multiple authentication methods for a single user
   • CTo assign different permissions to different administrators
   • DTo store multiple sets of credentials for a user
   Reveal Solution Discussion Select an answer first