An administrator wants to view only system log entries that contain the word 'critical' to identify severe device health issues. Which filtering approach is most appropriate?

Apply a filter for severity level 'critical'

A firewall's CPU usage is high, and you need to determine if the issue is caused by a specific process or by overall traffic load. Which two steps should you take?

Use 'show running resource-monitor' to view per-process CPU usage and correlate with traffic patterns.

Disable all security policies to reduce CPU usage.

Reboot the firewall to clear the CPU usage and see if it returns.

Increase the CPU allocation to handle the load.

A firewall is experiencing high memory usage, and the system log shows repeated 'memory allocation failed' errors. You suspect a memory leak in a third-party application running on the firewall. Which two steps should you take to confirm the leak?

Uninstall the third-party application to see if memory usage drops.

Reboot the firewall to clear the memory and see if the errors stop.

Increase the firewall's memory allocation to accommodate the leak.

Monitor the application's memory usage over time using 'show running resource-monitor' and check for a steady increase.

A firewall shows consistently high dataplane CPU usage. Which type of traffic pattern is most likely to be the root cause?

A large number of new short-lived connections

Low session utilization with minimal traffic

High disk write activity due to logging

A steady stream of long-lived UDP flows

When troubleshooting high memory usage on a Palo Alto Networks firewall, which step is most useful for pinpointing the root cause?

Using CLI commands to identify the top memory-consuming processes

Reviewing the system log for error messages

Rebooting the firewall to clear memory

Checking the session table for the total number of active sessions

Palo Alto NetworksCertified Network Security Analyst

Domain 4Objective 3

4.3 Troubleshoot Device Usage and Health NETWORK-SECURITY-ANALYST Practice Questions (Page 3)

Part of the Troubleshooting domain, which accounts for 14% of the NETWORK-SECURITY-ANALYST exam.

27questions here

6free pages

6concepts

14%of the exam

Questions 11–15

11foundation · easy
An administrator wants to view only system log entries that contain the word 'critical' to identify severe device health issues. Which filtering approach is most appropriate?
Select an answer first
12expert · hard
A firewall's CPU usage is high, and you need to determine if the issue is caused by a specific process or by overall traffic load. Which two steps should you take?
Select an answer first
13expert · hard
A firewall is experiencing high memory usage, and the system log shows repeated 'memory allocation failed' errors. You suspect a memory leak in a third-party application running on the firewall. Which two steps should you take to confirm the leak?
Select an answer first
14foundation · easy
A firewall shows consistently high dataplane CPU usage. Which type of traffic pattern is most likely to be the root cause?
Select an answer first
15foundation · easy
When troubleshooting high memory usage on a Palo Alto Networks firewall, which step is most useful for pinpointing the root cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.