Posting to eliminate all doubt.
I can find three options from directly quoting the website:
"Kerberos SSO—The firewall first tries SSO authentication. If that fails, it falls back to the specified authentication Type."
"External authentication or local database authentication—The firewall prompts the user to enter login credentials, and uses an external service or local database to authenticate the user."
"Select the Type of authentication service.
...
If you select Cloud Authentication Service, configure a Cloud Identity Engine instance to communicate with the firewall."
Reference: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
A and C should be no doubt since they are mentioned in the PAN doc.
However, under the same doc --> SAML(https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/saml#id111aea26-0c56-4499-8a26-ea2ee8f43639)
It mentioned the PingFederate, which is the PingID.
Voting for ACE. PingID is one of the MFA platforms palo firewall and panorama can integrate with. Kerberos and cloud authentication service are the external services that firewall can use to authenticate along with local authentication.
Agreeing with earlier votes. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/configure-an-authentication-profile-and-sequence#idf258e497-4998-4a70-8676-aa9aba521a44
It's ABC; PingID is a valid MFA option: "For end-user authentication via Authentication Policy, the firewall directly integrates with several MFA platforms (Duo v2, Okta Adaptive, PingID, and RSA SecurID), as well as integrating through RADIUS or SAML for all other MFA platforms."https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/multi-factor-authentication#idbc927952-a47e-4bec-ab80-0605a47b4873
Not sure why everyone is giving different answers. It's also true many questions are wrongly answered here
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types
https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/authentication/authentication-types/multi-factor-authentication#idbc927952-a47e-4bec-ab80-0605a47b4873
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
examtopicstroilevw
3 months, 1 week ago0d2fdfa
7 months, 4 weeks agoYL123
9 months, 3 weeks agoMarshpillowz
11 months, 3 weeks agoJRKhan
1 year agoMetgatz
1 year, 1 month agoMetgatz
1 year, 1 month agowallaka
1 year, 2 months agoalinio11
1 year, 3 months agocertprep2021
1 year, 10 months agonotsosavyy
1 year, 8 months agoNawda
1 year, 4 months agokewokil120
1 year, 10 months agoDenskyDen
1 year, 10 months agodjedeen
1 year, 12 months agoevdw
2 years agoCOBrien
2 years, 1 month agoKaspinas
2 years, 1 month ago