nerdexam
Palo_Alto_Networks

NETSEC-ANALYST · Question #305

A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Dump File but must not

The correct answer is D. Device > Admin Roles > Add > Web UI > Operations. The NetSec manager needs to configure the new firewall administrator role profile in the Web UI > Operations section. This section allows the administrator to configure the privileges for downloading TSF File and Starts Dump File. The Reboot Device option is not available in this

Device Administration

Question

A NetSec manager was asked to create a new firewall administrator profile with customized privileges. The new firewall administrator must be able to download TSF File and Starts Dump File but must not be able to reboot the device. Where does the NetSec manager go to configure the new firewall administrator role profile?

Options

  • ADevice > Admin Roles > Add > XML API > Configuration
  • BDevice > Admin Roles > Add > XML API > Operational Request
  • CDevice > Admin Roles > Add > Web UI > Support
  • DDevice > Admin Roles > Add > Web UI > Operations

How the community answered

(31 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    6% (2)
  • D
    81% (25)

Explanation

The NetSec manager needs to configure the new firewall administrator role profile in the Web UI > Operations section. This section allows the administrator to configure the privileges for downloading TSF File and Starts Dump File. The Reboot Device option is not available in this section, so the new firewall administrator will not be able to reboot the device. Here are the steps on how to configure the new firewall administrator role profile: Go to Device > Admin Roles > Add. Select Web UI > Operations. In the Operations section, enable the Download TSF File and Starts Dump File options. Disable the Reboot Device option. The new firewall administrator role profile will now have the privileges to download TSF File and Starts Dump File, but not the privilege to reboot the device.

Topics

#admin roles#role-based access control#device administration#Web UI permissions

Community Discussion

No community discussion yet for this question.

Full NETSEC-ANALYST Practice