2.3 Configure Logging NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a 'log collection policy' in the context of log collector groups?

   • AA policy that determines how logs are forwarded to external syslog servers.
   • BA policy that controls firewall access to the internet.
   • CA policy that defines which log types are collected and stored by the group.
   • DA policy that manages the retention period of logs on the firewall.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   After enabling the Strata Logging Service on a firewall, what must be configured to send logs to the service?

   • AA Panorama plugin to manage the service.
   • BA log forwarding profile that specifies the Strata Logging Service as the destination for selected log types.
   • CA new security policy that allows traffic to the cloud service.
   • DA syslog server profile to relay logs to the cloud.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the first step to enable the Strata Logging Service on a PAN-OS firewall?

   • AActivate the service in the firewall's cloud services settings and associate it with the firewall's serial number.
   • BCreate a log forwarding profile and select the Strata Logging Service as the destination.
   • CConfigure a syslog server to receive logs from the firewall.
   • DInstall a log collector on the firewall's management interface.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A Panorama administrator is setting up log collection for the first time. They have added log collectors to Panorama and created a log collector group. What is the next step to ensure that firewalls send logs to the collectors?

   • AConfigure log forwarding profiles on the firewalls to send logs to the log collector group.
   • BAssign the firewalls to the log collector group in Panorama.
   • CEnable the Strata Logging Service on the firewalls.
   • DRestart the log collectors to apply the configuration.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following best describes how the Strata Logging Service integrates with PAN-OS firewalls?

   • AThe service only supports forwarding of traffic logs, not threat or system logs.
   • BFirewalls must run a local log collector that synchronizes with the cloud service.
   • CThe service requires a dedicated physical appliance installed on the customer's network.
   • DFirewalls send logs to the service via a cloud-based collector that is managed by Palo Alto Networks.
   Reveal Solution Discussion Select an answer first