1.7 Configure and Implement Identity Authentication Within Prisma Access SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A government agency requires strong authentication for Prisma Access that does not rely on shared secrets or passwords. The agency has an existing public key infrastructure (PKI) that issues smart card certificates to all employees. The security team wants to authenticate users based on their smart card certificates when they connect to Prisma Access. Which configuration should the administrator implement?

   • AConfigure LDAP authentication using the certificate as the LDAP bind credential.
   • BConfigure SAML authentication with the PKI as the identity provider.
   • CConfigure certificate-based authentication in Prisma Access and import the corporate CA certificate for validation.
   • DConfigure RADIUS authentication using the PKI as a RADIUS server.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   How does Kerberos authentication provide ticket-based access to Prisma Access?

   • AThe user sends their password directly to Prisma Access for verification
   • BThe user's browser stores a cookie that grants access to Prisma Access
   • CPrisma Access generates a one-time password and sends it to the user's email
   • DThe user presents a service ticket to Prisma Access, which validates it with the KDC
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   What is required for certificate-based authentication to work in Prisma Access?

   • AA smart card reader connected to the Prisma Access gateway
   • BA username and password in addition to the certificate
   • CA client certificate issued by a certificate authority that Prisma Access trusts
   • DA public key infrastructure (PKI) that is hosted on the same server as Prisma Access
   Reveal Solution Discussion Select an answer first