PCNSA Managing Objects Practice Question
An administrator needs to create an External Dynamic List (EDL) that contains a list of malicious IP addresses. The list is hosted on an internal web server at http://192.168.1.50/malicious.txt. The firewall must check for updates every hour. Which configuration is required?
⚠ Common exam trap
The trap here is selecting the wrong EDL type or using HTTPS when the source is HTTP, which would prevent successful retrieval of the list.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an EDL object with type 'IP List', source URL 'http://192.168.1.50/malicious.txt', and set the check interval to 60 minutes.
To create an External Dynamic List for malicious IP addresses hosted on an internal web server via HTTP, the administrator must configure an EDL of type 'IP List' with the correct source URL and set the check interval to 60 minutes. This ensures the firewall retrieves the list hourly, as required. The EDL can then be used in security policies to block traffic from those IP addresses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create an EDL object with type 'IP List', source URL 'http://192.168.1.50/malicious.txt', and set the check interval to 60 minutes.
Why this is correct
An External Dynamic List of type 'IP List' is used for IP addresses. The source URL points to the hosted file, and the check interval determines how often the firewall retrieves updates. Setting it to 60 minutes meets the hourly requirement. This configuration will automatically update the list and can be referenced in security policies.
- ✗
Create an EDL object with type 'IP List', source URL 'https://192.168.1.50/malicious.txt', and set the check interval to 60 minutes.
Why it's wrong here
The source URL uses HTTPS instead of HTTP. The internal web server is specified as HTTP in the scenario, so using HTTPS would likely fail unless the server is configured for SSL. This would prevent the firewall from retrieving the list, causing the EDL to remain empty or outdated.
- ✗
Create an EDL object with type 'Domain List', source URL 'http://192.168.1.50/malicious.txt', and set the check interval to 60 minutes.
Why it's wrong here
A Domain List EDL is used for domain names, not IP addresses. The file contains IP addresses, so using a Domain List would not correctly parse the entries. The firewall would ignore or misinterpret the IP addresses, rendering the EDL ineffective for blocking malicious IPs.
- ✗
Create an EDL object with type 'IP List', source URL 'http://192.168.1.50/malicious.txt', and set the check interval to 5 minutes.
Why it's wrong here
Setting the check interval to 5 minutes would retrieve updates more frequently than required. While this would still work, it does not meet the specific hourly requirement and could cause unnecessary load on the web server and firewall. The scenario explicitly states the update interval should be every hour, so 60 minutes is correct.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 385 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Palo Alto Networks exam blueprint
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.