PCNSA Device Management and Services Practice Question
An administrator configures SNMP monitoring on a firewall but receives no data from the SNMP manager. Which check should be performed first?
⚠ Common exam trap
Candidates often assume the problem is network connectivity (Option B) or subnet mismatch (Option C), but the PCNSA exam emphasizes that SNMP-specific configuration errors—especially the community string and allowed IP list—are the most frequent first-check items.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify the SNMP community string and allowed management IPs in the SNMP server profile
The most common cause of SNMP monitoring failure after initial configuration is a mismatch in the SNMP community string (for SNMPv2c) or authentication credentials, or the SNMP manager's IP not being permitted in the SNMP server profile. The SNMP server profile on the firewall explicitly defines which community strings and manager IPs are allowed to poll the device. If these are incorrect, the firewall will silently drop SNMP requests, even if network connectivity is fine.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Check that the SNMP manager supports SNMPv3
Why it's wrong here
Version is important but not the first check.
- ✗
Verify that the firewall's management IP is reachable from the SNMP manager
Why it's wrong here
Reachability is basic but usually works if ping is allowed; the issue is likely SNMP configuration.
- ✗
Ensure the SNMP manager is running on the same subnet as the firewall
Why it's wrong here
SNMP can work across subnets with routing.
- ✓
Verify the SNMP community string and allowed management IPs in the SNMP server profile
Why this is correct
These are essential for SNMP access.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.