Courseiva
← PCNSA
Full test
Device Management and Services →easyMultiple ChoiceObjective-mapped

PCNSA Device Management and Services Practice Question

Exhibit

<devices>
  <name>PA-220</name>
  <vlan>none</vlan>
  <ip>10.0.0.1/24</ip>
  <management-profile>allow-ping</management-profile>
</devices>

Refer to the exhibit. What is the effect of this configuration?

⚠ Common exam trap

Palo Alto Networks often tests the confusion between management plane services (like ping to the firewall) and data plane transit traffic (like ping through the firewall), leading candidates to incorrectly assume a management profile affects traffic forwarding.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The firewall responds to pings on the management interface.

The configuration shown is a management profile applied to an interface. The 'ping' service is enabled under the management profile, which allows the firewall to respond to ICMP echo requests (pings) on that specific interface. This does not permit transit ping traffic through the firewall, nor does it enable SSH or allow the firewall to initiate pings. Therefore, option C is correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The firewall allows ping traffic through all interfaces.

    Why it's wrong here

    This applies to management interface only.

  • ✗

    The management profile allows SSH access.

    Why it's wrong here

    Profile is 'allow-ping', not SSH.

  • ✓

    The firewall responds to pings on the management interface.

    Why this is correct

    The 'allow-ping' profile enables ICMP responses on management.

  • ✗

    The firewall cannot ping others.

    Why it's wrong here

    The profile allows responding to pings, not initiating them.

About these practice questions

One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.