2.3 Configure Logging NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following can be configured as a destination in a log forwarding profile?

   • ASNMP trap, FTP server, and cloud storage.
   • BNetFlow collector, API endpoint, and database.
   • CSyslog server, email, and Panorama.
   • DHTTP server, SMTP relay, and LDAP directory.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A Panorama administrator has created a log collector group with two log collectors. They want to ensure that logs from a specific set of firewalls are stored on both collectors for redundancy. What configuration is required?

   • AAssign the firewalls to the group and configure each firewall to send logs to both collectors individually.
   • BEnable high availability on the log collector group and assign the firewalls to the group.
   • CCreate two separate log collector groups, each with one collector, and assign the firewalls to both groups.
   • DConfigure log forwarding profiles on the firewalls to send logs to both collectors via syslog.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Where in Panorama do you assign a firewall to a log collector group?

   • AIn the Panorama templates, under Log Settings.
   • BIn the firewall's device settings, under Log Collector Group.
   • CIn the security policy rules, under Logging.
   • DIn the log collector group's settings, under Firewall Assignment.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of the Strata Logging Service in a PAN-OS firewall deployment?

   • ATo replace the firewall's threat prevention engine with a cloud-based inspection service.
   • BTo provide a backup of the firewall's configuration files to the cloud.
   • CTo enable real-time packet capture for network troubleshooting.
   • DTo provide cloud-based storage and management of firewall logs, offloading log storage from the firewall's local disk.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the role of a log collector in a Panorama deployment?

   • ATo receive and store logs from firewalls and forward them to Panorama for centralized management.
   • BTo perform threat prevention and content inspection on logs.
   • CTo generate security policies and push them to firewalls.
   • DTo provide a backup of firewall configurations.
   Reveal Solution Discussion Select an answer first