Q: 9
Palo Alto Networks NGFWs use SSL/TLS profiles to secure which two types of connections? (Choose
two.)
Options
Discussion
C vs B. User Authentication sometimes needs SSL/TLS when enabling certain features, so feels tricky.
C. D. I don't think B is right here since SSL/TLS profiles are tied to GlobalProtect Portal and Gateway, not user authentication. Pretty common trap if you're not hands-on with GlobalProtect.
Not B in this case, it's C and D. SSL/TLS profiles are for GlobalProtect Portal and Gateway, user authentication like Captive Portal uses a different config. B is an easy trap here imo.
C vs D, but I think both are right for this specific question since GlobalProtect Portal and Gateway each need their own SSL/TLS profile for cert management. B (User Authentication) sometimes feels like a gray area if you're thinking about Captive Portal or SAML, but those don't directly attach SSL/TLS profiles like GP does. Anyone else seen user auth directly use the firewall's profile config? I'm pretty sure it's just C and D.
C and D
C and D imo. SSL/TLS profiles are def required for GlobalProtect Portal and Gateway, since both need certificates for secure access. NAT tables and User Authentication don’t use SSL/TLS profiles directly on the firewall from what I know. Correct me if you’ve seen otherwise.
Its C and D. GlobalProtect needs SSL/TLS profiles for portal and gateways, not for NAT or user auth. Anyone disagree?
Probably C and D. The question's pretty clear for anyone who's set up GlobalProtect before, nice one.
Be respectful. No spam.
