Câu 37: NGFW-Engineer: Palo Alto Networks Certified Next-Generation Firewall Engineer

In a Palo Alto Networks environment, GlobalProtect has been enabled using certificate-based authentication for both users and devices. To ensure proper validation of certificates, one or more certificate profiles are configured. What function do certificate profiles serve in this context?

1. A. They store private keys for users and devices, effectively allowing the firewall to issue or reissue certificates if the primary Certificate Authority (CA) becomes unavailable, providing a built-in fallback CA to maintain continuous certificate issuance and authentication.
2. B. They define trust anchors (root / intermediate Certificate Authorities (CAs)), specify revocation checks (CRL/OCSP), and map certificate attributes (e.g., CN) for user or device authentication. — đáp án hiện tại
3. C. They allow the firewall to bypass certificate validation entirely, focusing only on username / password-based authentication.
4. D. They provide a one-click mechanism to distribute certificates to all endpoints without relying on external enrollment methods.