PCNSA · Question #260
PCNSA Question #260: Real Exam Question with Answer & Explanation
The correct answer is A: web UI. In PAN-OS, when you create a new Admin Role profile of type 'Device Admin' without making any modifications, the default access settings grant full access to the Web UI and the REST API. The XML API (B) and Command Line Interface (C) are not enabled by default in a new Admin Role
Question
When creating an Admin Role profile, if no changes are made, which two administrative methods will you have full access to? (Choose two.)
Options
- Aweb UI
- BXML API
- Ccommand line
- DRESTAPI
Explanation
In PAN-OS, when you create a new Admin Role profile of type 'Device Admin' without making any modifications, the default access settings grant full access to the Web UI and the REST API. The XML API (B) and Command Line Interface (C) are not enabled by default in a new Admin Role profile-administrators must explicitly grant access to these methods. This default behavior reflects the principle of least privilege, limiting programmatic and CLI access unless intentionally configured. The Web UI is the primary management interface, and the REST API is enabled by default as a modern management channel, while XML API and CLI are considered more advanced interfaces requiring explicit permission.
Topics
Community Discussion
No community discussion yet for this question.