Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementEasy
A security engineer needs to configure a Palo Alto Networks firewall to ensure that the device's clock is accurately synchronized with an external time source. Which protocol should be used to achieve this, and where is it typically configured on the firewall?
- ADNS; Network > DNS Proxies
- BNTP; Device > Setup > Services
- CSSH; Device > Setup > Management
- DSNMP; Device > Setup > Management
Show answer & explanationAnswer & explanation
Correct answer: B. NTP; Device > Setup > Services
Network Time Protocol (NTP) is used to synchronize device clocks. On Palo Alto Networks firewalls, NTP server settings are configured under Device > Setup > Services.
Why the other options are wrong
- A. DNS is for name resolution, not time synchronization. The location is incorrect.
- C. SSH is for secure command-line access, not time synchronization. The location is incorrect for NTP.
- D. SNMP is for monitoring, not time synchronization. The location is incorrect for NTP.
NTP Configuration
Network Time Protocol (NTP) is essential for accurate logging, certificate validation, and policy scheduling on a firewall.
- Ensures accurate timestamps for logs.
- Critical for certificate validity checks.
- Configured under Device > Setup > Services.
Memory trick: NTP keeps the firewall's clock in precise sync with the network tick.