PCNSA Device Management and Services Practice Question
Which THREE are required for Panorama to manage a firewall? (Select three)
⚠ Common exam trap
It's easy for candidates to assume a Panorama license is required on the firewall itself, but the license is only needed on Panorama, not on the managed firewall.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Certificate-based mutual authentication (or pre-shared key)
Panorama and managed firewalls must establish a secure, authenticated connection using either certificate-based mutual authentication or a pre-shared key. This ensures that only authorized firewalls can register with Panorama and receive configuration updates, preventing unauthorized devices from joining the management domain.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A valid Panorama license
Why it's wrong here
License is needed for Panorama, not a prerequisite for the firewall to be managed.
- ✗
Panorama plugin installed on the firewall
Why it's wrong here
Plugin is optional, not required.
- ✓
Certificate-based mutual authentication (or pre-shared key)
Why this is correct
Authentication is mandatory for secure communication.
- ✓
Template and device group configuration in Panorama
Why this is correct
Templates and device groups define the managed settings.
- ✓
Management IP reachability between Panorama and the firewall
Why this is correct
Basic network connectivity is required.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.