PCNSA Device Management and Services Practice Question
An administrator configured SNMP community and trap destination under Device > Setup > Services, but no traps are received. What additional configuration is needed?
⚠ Common exam trap
Palo Alto Networks often tests the misconception that configuring SNMP under Device > Setup is sufficient, but the trap here is that candidates forget the management profile is a separate, mandatory step to authorize SNMP traffic on the egress interface.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add a management profile that allows SNMP
Even after configuring SNMP communities and trap destinations under Device > Setup > Services, the firewall still requires a management profile that explicitly permits SNMP (and optionally traps) on the interface through which the traps will be sent. Without this profile applied to the interface, the firewall will not allow SNMP traffic to egress, and traps will be silently dropped.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set the source interface
Why it's wrong here
Source interface is optional for traps, not mandatory.
- ✗
Configure SNMP version
Why it's wrong here
SNMP version is already part of community configuration.
- ✗
Create a security policy
Why it's wrong here
Security policies govern data traffic, not management access.
- ✓
Add a management profile that allows SNMP
Why this is correct
The management profile must permit SNMP access to the management interface.
- ✗
Enable SNMP on the interface
Why it's wrong here
SNMP is enabled globally; interface-level enable is not required.
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.