When using SSH keys for CLI authentication for firewall administration, which method is used for authorization?

When using SSH keys for CLI authentication for firewall administration, which method is used for authorization?
A . Local
B. LDAP
C. Kerberos
D. Radius

View Answer

Answer: A

Explanation:

When using SSH keys for CLI authentication for firewall administration, the method used for authorization is local. This is described in the Palo Alto Networks PCNSE Study Guide in Chapter 4: Authentication and Authorization, under the section "CLI Authentication with SSH Keys":

"SSH keys use public key cryptography to authenticate users, but they do not provide a mechanism for authorization. Therefore, when using SSH keys for CLI authentication, authorization is always performed locally on the firewall."