New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Palo Alto Networks NGFW-Engineer Exam - Topic 3 Question 3 Discussion

Actual exam question for Palo Alto Networks's NGFW-Engineer exam
Question #: 3
Topic #: 3
[All NGFW-Engineer Questions]

An engineer is implementing a new rollout of SAML for administrator authentication across a company's Palo Alto Networks NGFWs. User authentication on company firewalls is currently performed with RADIUS, which will remain available for six months, until it is decommissioned. The company wants both authentication types to be running in parallel during the transition to SAML.

Which two actions meet the criteria? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, D

To enable both RADIUS and SAML authentication to run in parallel during the transition period, you need to configure an authentication sequence and an authentication profile that includes both authentication methods.

By creating an authentication sequence that includes both RADIUS and SAML server profiles, the firewall will attempt authentication with RADIUS first and, if that fails, will fall back to SAML. This enables both authentication types to function simultaneously during the transition period.

You can also configure an authentication profile that includes both the RADIUS Server Profile and the SAML Identity Provider server profile. This setup allows the firewall to use both RADIUS and SAML for authentication requests, and it will check both authentication methods in parallel.


Contribute your Thoughts:

0/2000 characters
Gerald
2 months ago
D sounds right, but I’d double-check the setup.
upvoted 0 times
...
Theodora
2 months ago
I think A is incorrect; they can run in tandem.
upvoted 0 times
...
Giuseppe
3 months ago
Surprised to see RADIUS still in the mix for six months!
upvoted 0 times
...
Joye
3 months ago
C seems too limited; we need both profiles active.
upvoted 0 times
...
Luz
3 months ago
B is definitely the way to go!
upvoted 0 times
...
Wilda
3 months ago
D sounds familiar, but I’m not entirely sure if adding SAML to the RADIUS profile is the right approach. I might lean towards B instead.
upvoted 0 times
...
Sueann
4 months ago
I’m a bit confused about whether we need a rollback plan. I thought it was just about setting up the profiles correctly.
upvoted 0 times
...
Tiara
4 months ago
I think we practiced a similar question where we had to create an authentication sequence. B seems like the right choice for running both in tandem.
upvoted 0 times
...
Tamera
4 months ago
I remember that SAML can work alongside RADIUS, but I'm not sure if they can be in the same profile.
upvoted 0 times
...
Frankie
4 months ago
I'm pretty confident that the correct answer is to create an authentication profile with the SAML Identity Provider Server Profile. The question states that both authentication types need to be running in parallel.
upvoted 0 times
...
Daron
4 months ago
Okay, I think I've got this. The key is to create an authentication sequence that includes both the RADIUS and SAML Identity Provider profiles so they can run concurrently.
upvoted 0 times
...
Edmond
5 months ago
Hmm, I'm a bit confused about whether we can actually run both RADIUS and SAML in parallel during the transition period. I'll need to re-read the question carefully.
upvoted 0 times
...
Blythe
5 months ago
This seems like a straightforward question, but I want to make sure I understand the requirements correctly before answering.
upvoted 0 times
...
Lauryn
10 months ago
B is the way to go. Gotta keep that RADIUS option open for the next 6 months, am I right? *winks*
upvoted 0 times
Iola
8 months ago
B is the way to go. Gotta keep that RADIUS option open for the next 6 months, am I right? *winks*
upvoted 0 times
...
Mitsue
8 months ago
C) Create and apply an authentication profile with the ''SAML Identity Provider'' Server Profile.
upvoted 0 times
...
Nan
9 months ago
B) Create an authentication sequence that includes both the ''RADIUS'' Server Profile and ''SAML Identity Provider'' Server Profile to run the two services in tandem.
upvoted 0 times
...
...
Margo
10 months ago
Definitely B. Why would you choose A and not be able to run them together? That's just asking for trouble.
upvoted 0 times
Carey
9 months ago
Because A) Create a testing and rollback plan for the transition from Radius to SAML, as the two authentication profiles cannot be run in tandem, would cause issues during the transition.
upvoted 0 times
...
Izetta
9 months ago
C) Create and apply an authentication profile with the ''SAML Identity Provider'' Server Profile.
upvoted 0 times
...
Wenona
9 months ago
B) Create an authentication sequence that includes both the ''RADIUS'' Server Profile and ''SAML Identity Provider'' Server Profile to run the two services in tandem.
upvoted 0 times
...
...
An
10 months ago
I'm not sure about option B. I think option D could also work by adding the SAML Identity Provider to the RADIUS profile.
upvoted 0 times
...
Dick
10 months ago
I agree with Leandro. Option B seems like the best choice to meet the criteria.
upvoted 0 times
...
Jesusa
11 months ago
B is the correct answer. You need both the RADIUS and SAML profiles to run in parallel during the transition period.
upvoted 0 times
Denny
9 months ago
C) Create and apply an authentication profile with the ''SAML Identity Provider'' Server Profile.
upvoted 0 times
...
Ilene
9 months ago
B) Create an authentication sequence that includes both the ''RADIUS'' Server Profile and ''SAML Identity Provider'' Server Profile to run the two services in tandem.
upvoted 0 times
...
Alverta
9 months ago
D) Create and add the ''SAML Identity Provider'' Server Profile to the authentication profile for the ''RADIUS'' Server Profile.
upvoted 0 times
...
Jenelle
10 months ago
B) Create an authentication sequence that includes both the ''RADIUS'' Server Profile and ''SAML Identity Provider'' Server Profile to run the two services in tandem.
upvoted 0 times
...
...
Leandro
11 months ago
I think option B is the correct answer because it mentions running both RADIUS and SAML in tandem.
upvoted 0 times
...

Save Cancel