4.3 Configure and Deploy Strata Logging Service SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A managed security service provider (MSSP) uses Panorama to manage multiple customer firewalls. They want to forward all traffic logs from all customers to Strata Logging Service for centralized analysis, but they need to ensure that logs from different customers remain identifiable. What should the administrator configure in Panorama?

   • AForward all logs to a single SLS tenant and use Panorama's built-in reporting to separate logs by device group.
   • BConfigure Panorama to append the customer name to each log entry using a custom log field.
   • CCreate a separate log forwarding profile for each customer and assign it to their respective device groups.
   • DUse a single log forwarding profile for all customers and rely on the source IP addresses in the logs for identification.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A multinational company uses Panorama to manage firewalls across three regions. They want to forward all logs to Strata Logging Service, but regional data residency regulations require that logs from each region remain in that region's SLS tenant. The administrator has already created three SLS tenants. What is the most efficient way to configure log forwarding?

   • ACreate three log forwarding profiles in Panorama, each pointing to a different SLS tenant, and assign each profile to the device groups for the respective region.
   • BCreate a single log forwarding profile pointing to one SLS tenant and use Panorama's region-based tags to separate logs.
   • CConfigure each firewall individually to forward logs to its regional SLS tenant, bypassing Panorama.
   • DUse Panorama's log collector to aggregate all logs and then forward to the appropriate SLS tenant based on source IP.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is migrating from Panorama to SCM for Prisma Access management. They have a complex log forwarding setup in Panorama with multiple profiles for different log types. During migration, they want to minimize disruption and ensure all log types continue to be forwarded to Strata Logging Service. What is the best approach?

   • AExport the Panorama log forwarding profiles and import them directly into SCM.
   • BRecreate all log forwarding profiles in SCM and assign them to the corresponding policies before decommissioning Panorama.
   • CUse SCM's default log forwarding settings, which automatically forward all log types to SLS.
   • DKeep Panorama running solely for log forwarding while using SCM for all other management.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator notices that threat logs are not appearing in Strata Logging Service even though the log forwarding profile is correctly configured in SCM. The security policy rules have the profile assigned. What is the most likely cause?

   • AThe log forwarding profile is assigned to the wrong device group.
   • BThe SLS tenant is not activated in the SCM subscription.
   • CThe threat log type is not selected in the log forwarding profile.
   • DThe security policy rules are not generating threat logs.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An MSSP manages multiple customers using a single Panorama deployment. Each customer requires logs forwarded to their own Strata Logging Service tenant. The administrator has created log forwarding profiles for each customer. What is the most critical consideration when assigning these profiles to ensure logs are correctly separated?

   • AConfigure each customer's firewalls to forward logs directly to their SLS tenant, bypassing Panorama.
   • BEnsure all customers' log forwarding profiles are assigned to the same device group for consistency.
   • CAssign each customer's log forwarding profile to the device groups that contain only that customer's firewalls.
   • DUse Panorama's administrative roles to restrict which administrators can view each customer's logs.
   Reveal Solution Discussion Select an answer first