3.1 Architect Panorama and Log Collectors NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a collector group with two log collectors. The architect needs to ensure that log retention is consistent across both collectors so that queries return complete results regardless of which collector holds the logs. What is the correct configuration?

   • AConfigure different retention policies on each collector to balance storage
   • BConfigure the same retention policy on both collectors in the group
   • CConfigure retention on Panorama, which applies to all collectors
   • DConfigure retention only on the primary collector
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a collector group with three log collectors. The architect wants to ensure that log forwarding remains resilient if one collector is taken offline for maintenance. What is the primary mechanism that provides this resilience?

   • AThe firewalls buffer logs locally until the collector returns
   • BThe firewalls are automatically reconfigured to send logs to a different collector group
   • CThe Panorama management server stores logs until the collector returns
   • DThe remaining collectors in the group automatically take over log reception from the firewalls
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A Panorama active/passive HA pair is deployed with a dedicated heartbeat link. The active node experiences a management-plane software crash, but the data plane (log collection) continues to function. The architect needs to determine whether a failover should occur. What is the correct behavior?

   • AFailover does not occur because the data plane is still functional and processing logs
   • BFailover occurs because the management plane is unavailable, even though the data plane is still processing logs
   • CFailover occurs only if the heartbeat link is also lost
   • DFailover does not occur because the passive node cannot take over log collection
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   What is the primary benefit of using a collector group for log collection?

   • AIt reduces the storage capacity required for logs
   • BIt provides load balancing and failover for log forwarding
   • CIt allows log collectors to be managed independently
   • DIt eliminates the need for Panorama
   Reveal Solution Discussion Select an answer first
6. 10foundation · medium

   After a failed log collector is restored, what process is used to redistribute logs among collectors in a group?

   • ALog rebalancing
   • BFailover trigger
   • CDynamic update
   • DConfiguration sync
   Reveal Solution Discussion Select an answer first