PCNSA Managing Objects Practice Question
Which TWO statements about External Dynamic Lists (EDLs) are true?
⚠ Common exam trap
Palo Alto Networks often tests the misconception that EDLs require manual updates or have fixed refresh intervals, when in fact they are fully automated and configurable, and that EDLs can only be used for IP addresses, not URLs (though they support both).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
EDLs can be used in security policy source and destination fields.
External Dynamic Lists (EDLs) can be used as source or destination objects in security policy rules. This allows the firewall to match traffic against a regularly updated list of IP addresses or URLs hosted externally, enabling dynamic threat intelligence integration without manual rule changes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
EDLs can be used in security policy source and destination fields.
Why this is correct
EDLs can be used as address objects in policies.
- ✗
EDLs have a fixed refresh interval that cannot be changed.
Why it's wrong here
The refresh interval is configurable.
- ✗
EDLs must be manually updated by an administrator.
Why it's wrong here
EDLs are automatically refreshed from an external source.
- ✓
EDLs support both IP addresses and URLs.
Why this is correct
EDLs can contain IPs, URLs, or domains.
- ✗
EDLs allow the administrator to add individual IPs directly via the GUI.
Why it's wrong here
EDLs are read-only in the GUI; IPs cannot be added manually.
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.