4.3 Configure and Deploy Strata Logging Service SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An organization uses SCM to manage Prisma Access and forwards all logs to Strata Logging Service. They are experiencing high costs due to the volume of logs being forwarded. They want to reduce costs while still maintaining visibility into security events. What is the most effective strategy?

   • AUse SCM's built-in reporting instead of SLS for all log analysis.
   • BDisable logging for all security policies and rely on SLS for threat detection.
   • CForward all logs to SLS but reduce the retention period in SLS settings.
   • DCreate separate log forwarding profiles for high-volume log types (e.g., URL filtering) and low-volume log types (e.g., threat), and forward only the low-volume types to SLS.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary benefit of integrating Strata Logging Service with SCM and Panorama for centralized log management?

   • AIt provides a single, cloud-based repository for logs from multiple managed firewalls and Prisma Access tenants.
   • BIt eliminates the need for any firewall configuration on Prisma Access.
   • CIt replaces the need for Panorama or SCM entirely.
   • DIt automatically applies security policies across all managed firewalls.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security administrator needs to forward HIP match logs from Prisma Access to Strata Logging Service for compliance reporting. The administrator has already configured the log forwarding profile in SCM. What additional configuration is required to ensure HIP match logs are forwarded?

   • AEnable 'HIP Match' in the SCM global logging settings and set SLS as the default destination.
   • BConfigure the HIP object to send logs directly to SLS using its own forwarding settings.
   • CEnable HIP match logging in the HIP object and assign the log forwarding profile to the HIP policy.
   • DSelect 'HIP Match' as a log type in the log forwarding profile and apply it to all security policies.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A security engineer is planning to centralize log management for multiple Prisma Access tenants using Strata Logging Service. Which management plane component must be configured to send logs from the Prisma Access infrastructure to Strata Logging Service?

   • AThe Strata Logging Service must be configured as a log collector group in Panorama.
   • BThe Strata Logging Service must be configured as a syslog server in the Panorama log settings.
   • CThe Prisma Access app infrastructure must be configured directly with the Strata Logging Service API endpoint.
   • DPanorama or SCM must be configured to forward logs to Strata Logging Service as the centralized logging destination.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization wants to forward URL filtering logs from Prisma Access to Strata Logging Service, but only for traffic that matches specific security policy rules. The administrator has created a log forwarding profile with URL Filtering selected. What is the correct way to apply this profile?

   • ACreate a separate log forwarding profile for each URL filtering category.
   • BApply the log forwarding profile to the URL filtering profile used in the security policies.
   • CAssign the log forwarding profile to the specific security policy rules that should generate URL filtering logs.
   • DEnable URL filtering logging in the SCM global settings and set SLS as the default destination.
   Reveal Solution Discussion Select an answer first