Palo Alto Networks Certified Strata Field Engineer (PCSFE) — Question 16

A user must be assigned one of which two roles in order to create local rulestacks in the Cloud NGFW for AWS tenant? (Choose two.)

Answer options

• A. LocalRuleStackAdmin
• B. FirewallRulestackAdmin
• C. GlobalRulestackAdmin
• D. GlobalFirewallAdmin

Correct answer: A, B

Explanation

The correct roles for creating local rulestacks are LocalRuleStackAdmin and FirewallRulestackAdmin, as they provide the necessary permissions. The other options, GlobalRulestackAdmin and GlobalFirewallAdmin, deal with global configurations and do not grant the ability to create local rulestacks.