Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 308

An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department.

Which dynamic role does the administrator assign to the new-hire colleague?

Answer options

• A. Superuser (read-only)
• B. Device administrator (read-only)
• C. Firewall administrator (read-only)
• D. System administrator (read-only)

Correct answer: B

Explanation

The correct answer is B, Device administrator (read-only), as it allows access to firewall settings without granting full administrator privileges. The other options, such as Superuser, Firewall administrator, and System administrator, may provide broader access than intended, including administrative capabilities, which is not suitable for this scenario.