What is the primary purpose of an authentication role in PAN-OS?

To specify the order in which authentication servers are tried

To define which authentication profiles are available for administrative users

To control administrative access based on user identity and group membership

To store user credentials locally on the firewall

After configuring an authentication sequence with LDAP and Local profiles, an administrator reports that when LDAP is down, the login attempt takes a very long time before falling back to Local. The LDAP profile has a timeout of 30 seconds. What is the most likely cause of the delay?

The LDAP profile has a retry count that causes multiple timeout periods to elapse before the sequence moves to the next profile.

The firewall is configured to use a different authentication sequence for the admin account, which includes a third profile with a long timeout.

The authentication sequence is configured to wait for all profiles to respond before selecting the first successful one.

The Local profile is configured with a long timeout, which delays the fallback.

What is the purpose of the timeout setting in an authentication profile?

To limit the time the firewall waits for a response from the authentication server

To define the validity period of the user's password

To set the interval between authentication attempts

To specify how long a user remains logged in before being logged out

In an authentication sequence, what happens if the first authentication profile fails?

The next authentication profile in the sequence is attempted

The firewall falls back to local authentication automatically

The authentication attempt is immediately rejected

The user is prompted to re-enter credentials

Palo Alto NetworksCertified Next-Generation Firewall Engineer

Domain 2Objective 1

2.1 Implement Authentication Roles, Profiles, and Sequences NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 6)

Part of the PAN-OS Device Setting Configuration domain, which accounts for 40% of the NEXT-GENERATION-FIREWALL-ENGINEER exam.

31questions here

7free pages

10concepts

40%of the exam

Questions 26–30

26foundation · medium
What is the primary purpose of an authentication role in PAN-OS?
Select an answer first
27expert · medium
After configuring an authentication sequence with LDAP and Local profiles, an administrator reports that when LDAP is down, the login attempt takes a very long time before falling back to Local. The LDAP profile has a timeout of 30 seconds. What is the most likely cause of the delay?
Select an answer first
28foundation · medium
Which of the following is a parameter you would configure in an LDAP authentication profile?
Select an answer first
29foundation · medium
What is the purpose of the timeout setting in an authentication profile?
Select an answer first
30foundation · medium
In an authentication sequence, what happens if the first authentication profile fails?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NEXT-GENERATION-FIREWALL-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NEXT-GENERATION-FIREWALL-ENGINEER” is a trademark of its owner, used for identification only.