Exam PCNSE All QuestionsBrowse all questions from this exam
Question 438

An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department.

Which dynamic role does the administrator assign to the new-hire colleague?

    Correct Answer: B

    To grant read-only access to all firewall settings, except administrator accounts, the appropriate role to assign is Device administrator (read-only). This role provides read-only access to all firewall settings while restricting access to password profiles and administrator accounts, aligning perfectly with the administrator's requirements.

Discussion
chrisy042Option: B

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-role-types

[Removed]Option: B

B is correct

mz101Option: B

Yes, should be B

NawdaOption: B

There is nothing called Firewall Administrator nor System Administrator Options are: Superuser (read-only) [everything but in read only] Device administrator (read-only) [read only to All except password profile and admin accounts] Virtual system administrator (read-only) [read only to assigned VSys]

aatechlerOption: B

Device administrator (read-only) Read-only access to all firewall settings except password profiles (no access) and administrator accounts (only the logged in account is visible). https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/manage-firewall-administrators/administrative-role-types

rom007Option: B

B should B

MarshpillowzOption: B

B is correct

MetgatzOption: B

Device administrator (read-only)