nerdexam
Palo_Alto_Networks

PCNSA · Question #25

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

The correct answer is C. Role-based. Role Based profile roles: These are custom roles you can configure for more granular access control over the functional areas of the web interface, CLI, and XML API. For example, you can create an Admin Role profile role for your operations staff that provides access to the…

Submitted by kim_seoul· Apr 18, 2026Device Management and Services

Question

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

Options

  • ARoot
  • BDynamic
  • CRole-based
  • DSuperuser

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    3% (1)
  • C
    89% (34)
  • D
    3% (1)

Explanation

Role Based profile roles: These are custom roles you can configure for more granular access control over the functional areas of the web interface, CLI, and XML API. For example, you can create an Admin Role profile role for your operations staff that provides access to the firewall and network configuration areas of the web interface and a separate profile for your security administrators that provides access to security policy definitions, logs, and reports. On a firewall with multiple virtual systems, you can select whether the role defines access for all virtual systems or specific virtual systems. After new features are added to the product, you must update the roles with corresponding access privileges; the firewall does not automatically add new features to custom role definitions.

Topics

#Administrator accounts#Role-based access control#Granular permissions#User management

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice