Courseiva
← PCNSA
Full test
Device Management and Services →easyMultiple ChoiceObjective-mapped

PCNSA Device Management and Services Practice Question

An administrator needs to access the firewall's CLI via SSH, but the default SSH port (22) is blocked by the corporate firewall. Which configuration allows SSH on a non-standard port?

⚠ Common exam trap

Test-takers frequently confuse the management port settings for SSH with other protocol settings (like HTTP/HTTPS) or assume a 'Services' or 'Administration' menu exists, leading them to pick an option that sounds plausible but does not exist in the PAN-OS GUI.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Device > Setup > Management > Port for SSH

The firewall's SSH port is configured under Device > Setup > Management > Port for SSH. This setting allows the administrator to change the default TCP port 22 to any non-standard port, enabling SSH access when the corporate firewall blocks the default port. The management interface settings control all inbound management protocols, including SSH, HTTPS, and ping.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    Device > Setup > Management > Port for SSH

    Why this is correct

    Allows setting a non-default SSH port for CLI access.

  • ✗

    Device > Setup > Services > SSH Port

    Why it's wrong here

    SSH port is not configured under Services.

  • ✗

    Device > Setup > Management > Port for HTTP/HTTPS

    Why it's wrong here

    This configures HTTP/HTTPS management access ports, not SSH.

  • ✗

    Device > Administration > SSH Port

    Why it's wrong here

    There is no Administration tab for SSH port.

  • ✗

    Device > Setup > Operations > SSH

    Why it's wrong here

    Operations tab does not contain SSH port settings.

About these practice questions

Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.