Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 510 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 510
Topic #: 1

A superuser is tasked with creating administrator accounts for three contractors. For compliance purposes, all three contractors will be working with different device-groups in their hierarchy to deploy policies and objects.

Which type of role-based access is most appropriate for this project?

A. Create a Dynamic Admin with the Panorama Administrator role.
B. Create a Dynamic Read only superuser.
C. Create a Device Group and Template Admin.
D. Create a Custom Panorama Admin.

Show Suggested Answer

Suggested Answer: C 🗳️

by kewokil120 at March 20, 2023, 2:29 a.m.

Comments

Submit Cancel

Marshpillowz

10 months, 2 weeks ago

Selected Answer: C

C appears correct

upvoted 1 times

...

JRKhan

11 months ago

Selected Answer: C

Most appropriate is C. Custom Panorama Admin: Custom Panorama Admin roles allow you to customize the elements of Panorama that an administrator can access. You can hide tabs in the web interface, you can set specific items in Panorama to read-only, or you can limit an administrator’s access to Panorama plugins. Custom Panorama Admin roles require planning and configuration, but they provide extensive flexibility because you can control what administrators can access through the web interface or the CLI. Device Group and Template Admin: Device Group and Template Admin roles also require configuration because there are no built-in examples. These Admin Roles allow you to define which Panorama templates or Panorama device groups an administrator can access and configure. You can hide tabs in the web interface or set specific items to read only to control what administrators can configure.

upvoted 2 times

...

brian7857ffs45

1 year ago

This question was on the exam.. Nov 2023

upvoted 3 times

...

Artbrut

1 year, 3 months ago

Selected Answer: C

It´s C, tested in the lab.

upvoted 1 times

...

HaillyHops

1 year, 4 months ago

The question states: all three contractors will be working with different device-groups in their hierarchy to deploy policies and objects. Policies and Objects = Device Groups C is wrong because it gives more privileges (in this case, access to Template = Network + Device) B allows you to be more granular and only gran access to the Device Group section.

upvoted 1 times

HaillyHops

1 year, 4 months ago

By more granular, I mean you can create and assign and admin profile with restricted rights under the Custom Panorama admin option

upvoted 1 times

...

sov4

1 year, 4 months ago

Selected Answer: C

C. Tested in the lab.

upvoted 1 times

...

pkevinkou

1 year, 8 months ago

Selected Answer: C

C: Administrator Type ->Device Group and Templete admin(select Access Domain & Administrator Role) D: Custom Panorama admin (just can select Admin Role profile)

upvoted 4 times

HaillyHops

1 year, 4 months ago

Wrong, Custom Panorama admin allows you to create a new admin profile and assign specific rights such as Device Group

upvoted 2 times

...

creesenator

1 year, 8 months ago

Selected Answer: D

Another poorly worded question - I am thinking D - https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/firewall-administration/reference-web-interface-administrator-access#id30fd7bf6-c7af-45b4-9477-77a03c49acd8

upvoted 2 times

duckduckgooo

1 year, 8 months ago

I am going for C. Take a look here: https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/set-up-panorama/set-up-administrative-access-to-panorama/configure-an-admin-role-profile#idf54b7aab-e379-4a34-b82b-b8165586ce53

upvoted 3 times

...

creesenator

1 year, 8 months ago

I stand corrected - C

upvoted 2 times

...

kewokil120

1 year, 9 months ago

Selected Answer: C

Leaning towards c

upvoted 2 times

...