Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 217

A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Dump File but must not be able to reboot the device.

Where does the NetSec manager go to configure the new firewall administrator role profile?

Answer options

• A. Device > Admin Roles > Add > XML API > Configuration
• B. Device > Admin Roles > Add > XML API > Operational Request
• C. Device > Admin Roles > Add > Web UI > Support
• D. Device > Admin Roles > Add > Web UI > Operations

Correct answer: C

Explanation

The correct option is C because the Web UI > Support section is where firewall administrator roles can be configured with the necessary privileges. The other options do not provide the appropriate interface for creating a profile that can manage support-related tasks like downloading files without rebooting the device.