nerdexam
Palo_Alto_Networks

PCNSA · Question #324

What are the two types of Administrator accounts? (Choose two.)

The correct answer is A. Role Based C. Dynamic. Palo Alto Networks firewalls support two types of administrator account profiles: Dynamic and Role Based. Dynamic administrator roles (Superuser, Superuser Read-Only, Device Administrator, etc.) are predefined by Palo Alto Networks and automatically updated when new features…

Submitted by chen.hong· Apr 18, 2026Device Management and Services

Question

What are the two types of Administrator accounts? (Choose two.)

Options

  • ARole Based
  • BSuperuser
  • CDynamic
  • DLocal

How the community answered

(36 responses)
  • A
    89% (32)
  • B
    3% (1)
  • D
    8% (3)

Explanation

Palo Alto Networks firewalls support two types of administrator account profiles: Dynamic and Role Based. Dynamic administrator roles (Superuser, Superuser Read-Only, Device Administrator, etc.) are predefined by Palo Alto Networks and automatically updated when new features are added - no manual maintenance required. Role Based administrators use a custom Admin Role profile that grants granular, manually defined permissions. 'Superuser' is a Dynamic role (not a separate type), and 'Local' describes where an account is stored, not its type.

Topics

#Administrator Accounts#Role-Based Access Control#Authentication#Dynamic Role Mapping

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice