PCNSA Device Management and Services Practice Question
A company needs to receive email alerts for critical system events. What is the recommended method to configure email notifications on a Palo Alto Networks firewall?
⚠ Common exam trap
It's easy for candidates to confuse syslog or SNMP as direct email notification methods, but Palo Alto Networks firewalls require a dedicated Email Server Profile for native SMTP-based alerting, and other methods like syslog or SNMP need additional infrastructure to generate emails.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an Email server profile under Device > Server Profiles with SMTP settings
Palo Alto Networks firewalls provide a native Email Server Profile under Device > Server Profiles that allows direct SMTP configuration for sending email alerts. This is the recommended method as it integrates directly with the firewall's alerting system without requiring external tools or services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create an Email server profile under Device > Server Profiles with SMTP settings
Why this is correct
An Email server profile under Device > Server Profiles supplies the SMTP server, port, sender and authentication details that the firewall's log-forwarding and alerting engine uses to dispatch event notifications. Without this profile, no email alerting path exists.
- ✗
Configure an SNMP trap receiver to forward events to email
Why it's wrong here
SNMP traps deliver events to an SNMP manager, not to email recipients; the firewall's own email notification requires an SMTP server profile under Device > Server Profiles. It tempts because SNMP is a valid alerting transport, but converting traps to email needs external tooling.
- ✗
Enable ICMP echo replies to trigger email via a separate scripting tool
Why it's wrong here
ICMP echo replies only confirm host reachability; they carry no event data and cannot compose or dispatch email. The firewall's own Email profile under Device > Server Profiles sends alerts directly. ICMP monitoring suits availability checks via external tooling, not notification delivery.
- ✗
Set up a syslog server that sends email alerts
Why it's wrong here
A syslog server forwards log records to a collector; it does not natively generate email alerts unless additional software is configured, adding an unnecessary dependency. The firewall's built-in Email server profile sends alerts directly. Syslog suits centralised log retention and correlation, not native notification.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 385 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.