A multinational corporation forwards SLS logs to two different syslog collectors: one in the US and one in the EU. The US collector uses a certificate from a public CA, and the EU collector uses a certificate from an internal CA. Both forwarding profiles were working, but after a maintenance window, the EU profile fails with a certificate validation error while the US profile continues to work. What is the most likely cause?

The EU collector's IP address changed during maintenance.

The US collector's public CA certificate expired during the maintenance window.

The firewall's data plane was restarted, causing the EU profile to lose its configuration.

The internal CA certificate for the EU collector was removed from the firewall's trusted CA list during maintenance.

Why is syslog over TLS preferred over plain syslog for log forwarding?

It provides faster log delivery

It encrypts log data in transit

It eliminates the need for a syslog server

It compresses logs to reduce bandwidth

What is a key requirement for configuring syslog over TLS forwarding to Strata Logging Service?

A valid CA-signed certificate on the syslog server

A shared secret key between the firewall and the syslog server

A dedicated management interface for log traffic

A public IP address on the firewall

What is a primary consideration when selecting between syslog over TLS and HTTP for log forwarding?

The destination system's supported protocol

The number of users on the network

The color of the firewall chassis

What is a key benefit of using standard protocols like syslog for SIEM integration?

They are universally supported by SIEM vendors

They provide built-in log parsing

They are proprietary to Palo Alto Networks

Palo Alto NetworksCertified Network Security Architect

Domain 3Objective 4

3.4 Recommend Strata Logging Service Log Forwarding Methods and Integrations (e.g., Syslog over TLS, HTTP, Email) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Part of the Centralized Management and IAM domain, which accounts for 13% of the NETWORK-SECURITY-ARCHITECT exam.

24questions here

5free pages

7concepts

13%of the exam

Questions 16–20

16expert · hard
A multinational corporation forwards SLS logs to two different syslog collectors: one in the US and one in the EU. The US collector uses a certificate from a public CA, and the EU collector uses a certificate from an internal CA. Both forwarding profiles were working, but after a maintenance window, the EU profile fails with a certificate validation error while the US profile continues to work. What is the most likely cause?
Select an answer first
17foundation · easy
Why is syslog over TLS preferred over plain syslog for log forwarding?
Select an answer first
18foundation · easy
What is a key requirement for configuring syslog over TLS forwarding to Strata Logging Service?
Select an answer first
19foundation · easy
What is a primary consideration when selecting between syslog over TLS and HTTP for log forwarding?
Select an answer first
20foundation · easy
What is a key benefit of using standard protocols like syslog for SIEM integration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NETWORK-SECURITY-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ARCHITECT” is a trademark of its owner, used for identification only.