1.5 Create and Apply Log Forwarding Profile NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   Which method can be used to verify that logs are being forwarded correctly to a syslog server?

   • AReview the local traffic logs on the firewall
   • BCheck the firewall's system logs for configuration changes
   • CCheck the syslog server for received log entries and review the firewall's log forwarding statistics
   • DPing the syslog server from the firewall's management interface
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the purpose of applying a filter within a Log Forwarding profile?

   • ATo encrypt the logs during transmission
   • BTo compress the logs to save bandwidth
   • CTo limit which logs are forwarded based on criteria such as severity or application
   • DTo change the format of the logs before they are sent
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a common sign that a Log Forwarding profile is not working correctly?

   • AThe firewall's management interface is slow
   • BThe destination server is not receiving any logs, but the firewall's local logs show traffic
   • CThe security policy rule's action is changed to 'deny'
   • DThe firewall's system logs show no entries
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   After configuring a Log Forwarding profile and applying it to a security policy rule, an administrator checks the Monitor > Logs tab and sees traffic logs, but the external syslog server is not receiving any logs. The syslog server profile is correctly configured and the server is reachable. What should the administrator check NEXT?

   • AVerify that the Log Forwarding profile is applied to the correct security policy rule and that the rule is matching traffic.
   • BCheck the syslog server's IP address and port configuration in the syslog server profile.
   • CCheck the local traffic log to see if the logs are being generated with the correct log type selected in the profile.
   • DVerify that the firewall's management interface has a route to the syslog server.
   Reveal Solution Discussion Select an answer first