View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam

Palo Alto Next-Generation Firewall Engineer Exam Materials - Question #54 Discussion

Comment Image Comment Image Comment Image

Which two services are configured by applying an SSL/TLS service profile? (Choose two answers)

  • A. GlobalProtect portal
  • B. Log forwarding to Strata Logging Service
  • C. Forward-Trust certificate
  • D. Syslog server monitoring
Correct Answer: A,D

Brave-Dump Community Votes

Answer: A, D (5 votes) 100%

Community Explanations & Comments (5)

Yomna Adel Abdelhameed Mohamed 10 months ago
Selected: A, D
I think the correct answer (A, D)
Brave-Dumps.com Admin 10 months ago
Please explain why or write a reference
Franck 9 months ago
Selected: A, D
To answer this question, it's important to remember the purpose of an SSL/TLS Service Profile in PAN-OS.

An SSL/TLS Service Profile is used to configure firewall services that require a certificate when establishing an outbound TLS connection or when providing a TLS service.

Services typically associated with an SSL/TLS Service Profile include:

- GlobalProtect Portal/Gateway

- Syslog over TLS

- Email (SMTP) over TLS

- OCSP/SCEP

- User-ID over TLS

- Telemetry

- LDAP over SSL

In contrast, an SSL/TLS Service Profile is not related to:

- The Forward Trust certificate (it's a certificate, not a service)

- Strata Logging Service (uses internal certificates, not an SSL/TLS profile)
Ayesha 9 months ago
Selected: A, D
An SSL/TLS Service Profile is used to define the server certificate and TLS protocol versions for services where the firewall acts as a server (listening for connections) or specific secure client services. According to the administration guide, the services that utilize an SSL/TLS Service Profile are:

GlobalProtect Portals and Gateways

User-ID Syslog Listening Service

Captive Portal (Authentication Portal)

Management Interface (Web UI)

User-ID Agent
Nader Albaire 3 months ago
Selected: A, D
The correct answer (A, D)
berry tomatoz 1 month ago
Selected: A, D
https://docs.paloaltonetworks.com/ngfw/administration/certificate-management/configure-ssl-tls-service-profile#configure-ssl-tls-service-profile-pan-os

Palo Alto Networks firewalls and Panorama appliances use SSL/TLS to secure connections to the Authentication Portal, GlobalProtect portals and gateways, the management interface, HTTPS websites that require password access (URL Admin Override), and the User-ID™ syslog listening service.