4.3 Configure and Deploy Strata Logging Service SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In SCM, where does an administrator configure the forwarding of Prisma Access logs to Strata Logging Service?

   • AIn the Network > Interfaces section, by assigning a log collector to the Prisma Access gateway.
   • BIn the Objects > Security Profiles section, by enabling logging on each security profile.
   • CIn the Device > Setup > Services section, by enabling the Strata Logging Service API key.
   • DIn the Log Forwarding section of the SCM settings, by creating a log forwarding profile and selecting Strata Logging Service as the destination.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses both Panorama (for on-premises firewalls) and SCM (for Prisma Access). They want to forward logs from both management planes to a single Strata Logging Service tenant for unified visibility. What should the administrator do?

   • ACreate two separate SLS tenants, one for Panorama logs and one for SCM logs.
   • BForward all logs from Panorama to SCM, then forward from SCM to SLS.
   • CConfigure log forwarding profiles in both Panorama and SCM to point to the same SLS tenant.
   • DUse Panorama to manage Prisma Access and forward all logs through Panorama to SLS.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An MSSP uses Panorama to manage firewalls for multiple customers. They want to forward logs to Strata Logging Service, but each customer has different log type requirements. Customer A needs threat and WildFire logs, Customer B needs traffic and URL filtering logs, and Customer C needs all log types. What is the most efficient way to configure this?

   • ACreate three log forwarding profiles, one for each customer's requirements, and assign them to the respective device groups.
   • BConfigure each firewall individually with its own log forwarding profile.
   • CCreate a single log forwarding profile with all log types and assign it to all device groups.
   • DUse Panorama's log collector to filter logs by customer before forwarding to SLS.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company uses SCM to manage Prisma Access and wants to forward logs to Strata Logging Service for centralized storage. They also want to retain the ability to view logs directly in SCM for quick troubleshooting. What is the correct configuration?

   • AConfigure log forwarding to SLS while keeping SCM's local logging enabled.
   • BDisable SCM local logging to ensure all logs are only sent to SLS.
   • CUse SLS as the only log destination and access logs exclusively through SLS.
   • DConfigure SLS to forward logs back to SCM for local storage.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses SCM to manage Prisma Access and wants to forward only authentication logs to Strata Logging Service for compliance auditing. The administrator has already created a log forwarding profile in SCM. What must be done to ensure only authentication logs are forwarded?

   • ACreate a separate log forwarding profile for each log type and assign only the authentication profile to the firewall.
   • BConfigure SLS to receive all logs and then use SLS filtering to display only authentication logs.
   • CSelect 'Authentication' as the only log type in the log forwarding profile and apply it to the authentication policy.
   • DEnable 'Authentication' logging in the SCM global settings and configure SLS as the default destination.
   Reveal Solution Discussion Select an answer first