Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementMedium
A security analyst is reviewing the administrative accounts configured on a Palo Alto Networks firewall. They notice that the 'admin' account still uses its default password. What is the MOST immediate security risk associated with this configuration?
- AThe firewall will not be able to receive software updates.
- BThe firewall's performance will be degraded due to weak encryption.
- CThe default password is susceptible to brute-force attacks.
- DUnauthorized access to the firewall's configuration and control.
Show answer & explanationAnswer & explanation
Correct answer: D. Unauthorized access to the firewall's configuration and control.
Leaving the default 'admin' password unchanged on a Palo Alto Networks firewall poses a significant security risk because it allows anyone with knowledge of the default credentials to gain unauthorized, full administrative access to the device, potentially leading to compromise of the entire network.
Why the other options are wrong
- A. Software updates are not directly tied to the admin password strength.
- B. Password strength does not directly impact firewall performance or encryption strength.
- C. While true that default passwords are often easy to guess and susceptible to brute-force, the immediate and overarching risk is the unauthorized access itself, which brute-force is a method to achieve.
Default Admin Password Risk
Using default credentials for administrative accounts on any network device, especially firewalls, creates a critical vulnerability for unauthorized access and system compromise.
- Default admin/admin is widely known.
- Allows full control of the firewall.
- Changes should be made during initial setup.
Memory trick: A wide-open admin door means anyone can walk into your firewall's core!