2.3 Configure Logging NEXT-GENERATION-FIREWALL-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What does the 'forwarding schedule' setting in a log forwarding profile control?

   • AThe maximum size of log batches.
   • BHow often logs are sent to the destination, such as in real-time or at scheduled intervals.
   • CWhich log types are included in the forwarding.
   • DThe retention period of logs on the firewall.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When configuring log forwarding to the Strata Logging Service, what must be selected in the log forwarding profile?

   • AThe IP address of the nearest cloud region.
   • BThe encryption algorithm for log transmission.
   • CThe log types to forward, such as traffic, threat, and system logs.
   • DThe retention period for logs in the cloud.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When configuring a log collector group in Panorama, what is a required step?

   • ASetting up a syslog server for the group.
   • BAssigning one or more log collectors to the group.
   • CDefining a custom log format for the group.
   • DCreating a log forwarding profile for each collector.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A small business with a single firewall wants to reduce the cost and complexity of log management. They do not want to maintain any on-premises logging infrastructure. What is the most appropriate logging solution?

   • AEnable the Strata Logging Service on the firewall and configure log forwarding to it.
   • BDeploy a Panorama virtual appliance and configure log collectors.
   • CUse the firewall's local log storage and manually export logs periodically.
   • DConfigure the firewall to send logs to a free syslog server on a local workstation.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Panorama administrator is setting up log collection for a large enterprise. They have multiple log collectors and want to ensure that if one collector fails, its logs are still available from another collector. What is the best practice?

   • AUse the Strata Logging Service as a backup for log collectors.
   • BConfigure log forwarding profiles to send logs to multiple collectors via syslog.
   • CAssign each firewall to multiple log collector groups.
   • DConfigure log collector groups with high availability enabled.
   Reveal Solution Discussion Select an answer first