nerdexam
Palo_Alto_Networks

PCNSA · Question #375

What are the two ways to implement an exception to an external dynamic list? (Choose two.)

The correct answer is A. Edit the external dynamic list by removing the entries to exclude. C. Manually add an entry to the Manual Exceptions list.. Exceptions to an external dynamic list can be implemented either by directly modifying the source list to remove unwanted entries or by adding specific entries to a Manual Exceptions list within the firewall's configuration for that EDL.

Submitted by omar99· Apr 18, 2026Managing Objects

Question

What are the two ways to implement an exception to an external dynamic list? (Choose two.)

Options

  • AEdit the external dynamic list by removing the entries to exclude.
  • BSelect the entries to exclude from the List Entries list.
  • CManually add an entry to the Manual Exceptions list.
  • DEdit the external dynamic list by adding the "-" symbol before the entries to exclude.

How the community answered

(28 responses)
  • A
    89% (25)
  • B
    4% (1)
  • D
    7% (2)

Why each option

Exceptions to an external dynamic list can be implemented either by directly modifying the source list to remove unwanted entries or by adding specific entries to a Manual Exceptions list within the firewall's configuration for that EDL.

AEdit the external dynamic list by removing the entries to exclude.Correct

If the administrator controls the external dynamic list, the most direct way to exclude entries is to edit the source list itself and remove the entries that should not be included.

BSelect the entries to exclude from the List Entries list.

Selecting entries to exclude from a 'List Entries list' is not a standard configuration method for creating exceptions in Palo Alto Networks EDLs.

CManually add an entry to the Manual Exceptions list.Correct

Palo Alto Networks firewalls provide a 'Manual Exceptions' list within the External Dynamic List configuration, allowing administrators to explicitly define entries that should be excluded from the downloaded list.

DEdit the external dynamic list by adding the "-" symbol before the entries to exclude.

Using a '-' symbol before entries to exclude is not a recognized method for creating exceptions within an external dynamic list configuration on Palo Alto Networks firewalls.

Concept tested: Managing exceptions for External Dynamic Lists

Source: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-external-dynamic-lists/create-an-external-dynamic-list.html

Topics

#External Dynamic Lists#EDL Exceptions#Object Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PCNSA Practice