Exam PCNSA All Questions

View all questions & answers for the PCNSA exam

Exam PCNSA topic 1 question 294 discussion

Actual exam question from Palo Alto Networks's PCNSA

Question #: 294
Topic #: 1

A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Dump File but must not be able to reboot the device.

Where does the NetSec manager go to configure the new firewall administrator role profile?

A. Device > Admin Roles > Add > XML API > Configuration
B. Device > Admin Roles > Add > XML API > Operational Request
C. Device > Admin Roles > Add > Web UI > Support
D. Device > Admin Roles > Add > Web UI > Operations

Show Suggested Answer

Suggested Answer: C 🗳️

by OhEmGee at Feb. 5, 2023, 4:53 p.m.

Comments

Submit Cancel

mirko1976

5 months, 2 weeks ago

Selected Answer: D

A firewall administrator profile in Palo Alto Networks can be customized using Admin Roles to grant or restrict specific permissions. To allow the administrator to: Download TSF (Technical Support File) Start Dump File But NOT allow rebooting the device, The "Operations" section in the Web UI provides granular control over operational tasks, such as: Generating & downloading TSF files Capturing system dump files Restarting services (but restricting device reboots) The "Support" section provides access to support tickets and updates, but not device operations like TSF & dump files.

upvoted 1 times

...

Netsan

6 months ago

Selected Answer: D

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/reference-web-interface-administrator-access/web-interface-access-privileges/provide-granular-access-to-operations-settings#id81d24755-3919-4f77-9e85-db060e333121

upvoted 1 times

...

ALCOSTA35

8 months, 3 weeks ago

The right answer is D Device -> Admin Roles -> Web UI -> Operations. I am with my PA-820 web UI open now. Threre is no Support option

upvoted 1 times

...

Gallileo9

11 months, 1 week ago

D. Device > Admin Roles > Add > Web UI > Operations. In version PAN-OS 10.2 all actions are under Web UI, operations. (Reboot, Tech support file and Stats Dump file).

upvoted 2 times

...

chittadritta

1 year ago

D. Device > Admin Roles > Add > Web UI > Operations. Options under Operations (PAN-OS 11.1): - Reboot - Generate Tech Support File - Generate Stats Dump File - Download Core Files - Download Pcap Files

upvoted 2 times

...

cjace

1 year, 2 months ago

C. Device > Admin Roles > Add > Web UI > Support The NetSec manager can configure the new firewall administrator role profile by navigating to Device > Admin Roles, clicking Add, and then selecting the appropriate options under the Web UI tab

upvoted 1 times

...

jbas

1 year, 2 months ago

Selected Answer: C

In the GUI it is Device > Support > Tech Support file / Stats Dump file

upvoted 1 times

...

Blender808

1 year, 10 months ago

Selected Answer: C

Operations lets you reboot device etc Support lets you generate tech support file and stats dump file etc

upvoted 2 times

...

JR1012

1 year, 11 months ago

Selected Answer: C

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-support

upvoted 1 times

...

kenyabolada

2 years ago

Selected Answer: C

Support -> TSF file Operations -> Reboot device

upvoted 1 times

...

Grace_Shu

2 years, 1 month ago

Checked again, answer is D.

upvoted 2 times

...

Grace_Shu

2 years, 1 month ago

question said: must not be able to reboot the device. Answer is C

upvoted 2 times

...

OhEmGee

2 years, 5 months ago

Correct ans as verified in the PAN OS 10.2 configuration.

upvoted 1 times

OhEmGee

2 years, 5 months ago

Following are the option under, Device -> Admin Roles -> Add -> Web UI -> Operations: 1. Reboot 2. Generate Tech Support File 3. Generate Status Dump File 4. Download Core Files 5. Download PCAP Files

upvoted 7 times

...