1.5 Create and Apply Log Forwarding Profile NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An administrator has configured a Log Forwarding profile to send threat logs to a Panorama device and traffic logs to a syslog server. After applying the profile to a rule, the syslog server receives traffic logs, but Panorama is not receiving threat logs. The Panorama device is reachable from the firewall. What is the MOST likely cause of this issue?

   • AThe syslog server profile is also configured to send logs to Panorama, causing a conflict.
   • BThe Log Forwarding profile has a filter on the threat log type that does not match any generated threat logs.
   • CThe security policy rule is configured to log at session end, which only generates traffic logs.
   • DPanorama requires a separate Log Forwarding profile to be created for it to receive logs.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Where would a security administrator create a new Log Forwarding profile on a Palo Alto Networks firewall?

   • AObjects > Log Forwarding
   • BPolicies > Security
   • CNetwork > Profiles
   • DDevice > Log Settings
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What happens when a Log Forwarding profile is applied to a security policy rule?

   • AThe rule's logging settings are disabled to prevent duplicate logs
   • BLogs for traffic matching the rule are forwarded to the destinations configured in the profile
   • CThe firewall starts capturing packets for all traffic matching the rule
   • DThe rule automatically blocks all traffic that generates logs
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following can be configured as a destination in a Log Forwarding profile on a Palo Alto Networks firewall?

   • AA NetFlow collector
   • BA RADIUS server
   • CPanorama
   • DAn SNMP trap receiver
   Reveal Solution Discussion Select an answer first
6. 15application · easy

   An administrator has a security policy rule that allows web browsing for the marketing department. They want to forward URL filtering logs for this specific rule to a SIEM. The administrator has created a Log Forwarding profile with the URL Filtering log type and a syslog destination. What is the remaining step to complete this configuration?

   • AConfigure the syslog server profile to use the Log Forwarding profile's name.
   • BCreate a new security policy rule for the marketing department with the Log Forwarding profile attached.
   • CApply the Log Forwarding profile to the security policy rule for the marketing department.
   • DEnable logging at session start on the security policy rule.
   Reveal Solution Discussion Select an answer first