PCNSA Device Management and Services Practice Question
A network security administrator needs to back up the firewall configuration before making changes. The administrator wants to store the backup on an external SCP server at 198.51.100.10 using the account 'backupuser'. Which sequence of steps should the administrator take in the web interface?
⚠ Common exam trap
It's easy for candidates to confuse the Operations tab with the Management or Services tabs under Device > Setup, where configuration export options are not available.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device > Setup > Operations > Export named configuration snapshot, then select SCP and enter the server details.
In PAN-OS, configuration backups to external servers are performed via Device > Setup > Operations. The 'Export named configuration snapshot' option allows selection of SCP, FTP, or TFTP as the export protocol, and prompts for server address, username, and path. This is the standard method to store a configuration backup on an external SCP server, ensuring the configuration is preserved before changes are made.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device > Configuration > Export, then select SCP and enter the server details.
Why it's wrong here
While there is a Configuration section under Device, the export functionality is located under Device > Setup > Operations, not directly under Device > Configuration. The path described does not exist in PAN-OS, so the administrator would be unable to complete the SCP export through this menu.
- ✓
Device > Setup > Operations > Export named configuration snapshot, then select SCP and enter the server details.
Why this is correct
The Operations tab under Device > Setup provides export options for configuration snapshots. Selecting 'Export named configuration snapshot' allows the administrator to choose SCP as the export method and specify the server IP, username, and path. This directly creates a backup on the external SCP server, fulfilling the requirement.
- ✗
Device > Setup > Management > Export configuration, then select SCP and enter the server details.
Why it's wrong here
The Management tab under Device > Setup contains settings for management interface services, not configuration export options. There is no 'Export configuration' button there. The administrator would not find SCP export functionality in this location, so the backup would not be created as intended.
- ✗
Device > Setup > Services > Export configuration, then select SCP and enter the server details.
Why it's wrong here
The Services tab under Device > Setup is used to configure services like DNS, NTP, and SNMP, not configuration exports. There is no export option there. Choosing this path would not allow the administrator to back up the configuration to the SCP server, leaving the task incomplete.
Go deeper
Related to this question
About these practice questions
One of 385 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Palo Alto Networks exam blueprint
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.