nerdexam
Palo_Alto_Networks

PCNSA · Question #279

An administrator is trying to enforce policy on some (but not all) of the entries in an external dynamic list. What is the maximum number of entries that they can be excluded?

The correct answer is B. 100. Palo Alto Networks enforces a maximum limit of 100 exception entries per External Dynamic List (EDL). When an administrator wants to exclude specific entries from an EDL (so that those entries are not matched by the policy referencing the list), they can add them to the…

Submitted by fatima_kr· Apr 18, 2026Policy Evaluation and Management

Question

An administrator is trying to enforce policy on some (but not all) of the entries in an external dynamic list. What is the maximum number of entries that they can be excluded?

Options

  • A50
  • B100
  • C200
  • D1,000

How the community answered

(65 responses)
  • A
    3% (2)
  • B
    92% (60)
  • C
    3% (2)
  • D
    2% (1)

Explanation

Palo Alto Networks enforces a maximum limit of 100 exception entries per External Dynamic List (EDL). When an administrator wants to exclude specific entries from an EDL (so that those entries are not matched by the policy referencing the list), they can add them to the exception list, but only up to 100 entries. This limit applies per EDL object. Entries beyond this limit cannot be excluded, and the administrator would need a different strategy (such as modifying the source EDL or creating a separate policy) for additional exclusions.

Topics

#External Dynamic Lists#EDL Exclusions#Security Policy#System Limits

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice