How is a Log Forwarding profile applied to a security policy rule?

By configuring the profile in the rule's 'Logging' tab

By enabling 'Log Forwarding' in the rule's 'General' tab

By attaching the profile to the source zone of the rule

By selecting the profile in the 'Log Forwarding' drop-down within the rule's Actions tab

What is the primary purpose of a Log Forwarding profile on a Palo Alto Networks firewall?

To specify how logs are sent to external destinations such as syslog servers, Panorama, or email

To configure the retention period for logs stored on the management plane

To define which log types are stored locally on the firewall's disk

To enable real-time packet capture for traffic matching security policies

When creating a Log Forwarding profile, which setting is mandatory for the profile to be saved?

A filter that matches all traffic

At least one email server configured

A company has a security policy rule that allows traffic to a critical internal application. They need to forward threat logs for this rule to a SIEM, but ONLY for threats with a 'critical' or 'high' severity. The SIEM is configured as a syslog destination. The administrator creates a Log Forwarding profile with a syslog destination and selects the Threat log type. What filter should be applied to meet the requirement?

Severity eq critical or Severity eq high

Palo Alto NetworksCertified Network Security Analyst

Domain 1Objective 5

1.5 Create and Apply Log Forwarding Profile NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Part of the Object Configuration Creation and Application domain, which accounts for 30% of the NETWORK-SECURITY-ANALYST exam.

19questions here

4free pages

6concepts

30%of the exam

Questions 1–5

1foundation · easy
How is a Log Forwarding profile applied to a security policy rule?
Select an answer first
2foundation · easy
What is the primary purpose of a Log Forwarding profile on a Palo Alto Networks firewall?
Select an answer first
3foundation · easy
When creating a Log Forwarding profile, which setting is mandatory for the profile to be saved?
Select an answer first
4expert · medium
A company has a security policy rule that allows traffic to a critical internal application. They need to forward threat logs for this rule to a SIEM, but ONLY for threats with a 'critical' or 'high' severity. The SIEM is configured as a syslog destination. The administrator creates a Log Forwarding profile with a syslog destination and selects the Threat log type. What filter should be applied to meet the requirement?
Select an answer first
5application · easy
A security analyst needs to forward only threat logs with a critical severity to a syslog server for immediate analysis. The Log Forwarding profile is created with a syslog destination. What filter should be applied to the threat log type in the profile?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.

1.5 Create and Apply Log Forwarding Profile NETWORK-SECURITY-ANALYST Practice Questions (Page 1)

Questions 1–5

How is a Log Forwarding profile applied to a security policy rule?

What is the primary purpose of a Log Forwarding profile on a Palo Alto Networks firewall?

When creating a Log Forwarding profile, which setting is mandatory for the profile to be saved?

A security analyst needs to forward only threat logs with a critical severity to a syslog server for immediate analysis. The Log Forwarding profile is created with a syslog destination. What filter should be applied to the threat log type in the profile?

Keep studying — Object Configuration Creation and Application