4.3 Configure and Deploy Strata Logging Service SECURITY-SERVICE-EDGE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When configuring log forwarding to Strata Logging Service from Panorama, which settings must be specified in the log forwarding profile?

   • AThe log types (e.g., traffic, threat, URL filtering) and the Strata Logging Service as the forwarding destination.
   • BThe email server address and the log severity threshold.
   • CThe syslog server IP address and port number.
   • DThe log collector group name and the retention period.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization uses Panorama to manage a fleet of firewalls and wants to forward only threat and WildFire logs to Strata Logging Service while keeping all other logs on the local firewalls. The administrator has already created a log forwarding profile in Panorama. What is the next step to complete this configuration?

   • ASelect the log types (Threat and WildFire) in the log forwarding profile and assign the profile to the appropriate security policy rules.
   • BCreate a new log collector group in Panorama and add Strata Logging Service as a member.
   • CEnable Strata Logging Service as the default log collector in Panorama's device group settings.
   • DConfigure the firewalls to send all logs to Panorama first, then forward only Threat and WildFire logs to Strata Logging Service.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company uses Panorama to manage firewalls and wants to forward logs to Strata Logging Service. They have a mix of log types: traffic, threat, and URL filtering. The security team needs real-time visibility into threat logs but can tolerate delays for traffic and URL filtering logs. What is the best configuration approach?

   • ACreate two log forwarding profiles: one for threat logs with real-time forwarding, and another for traffic and URL filtering logs with batch forwarding.
   • BForward all logs to Panorama first, then configure Panorama to forward threat logs in real-time and others in batch.
   • CUse SLS's built-in real-time search for all log types.
   • DUse a single log forwarding profile for all log types with real-time forwarding.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A global company uses Prisma Access with SCM as its single management plane. The security team wants all firewall, threat, and URL filtering logs from all remote networks and mobile users to be centrally searchable in Strata Logging Service. They also want to retain the ability to run reports across all locations from one interface. What should the administrator configure?

   • AEnable Strata Logging Service as the log destination in the SCM logging settings and select the required log types.
   • BUse the Prisma Access API to export logs to an external SIEM and then forward them to Strata Logging Service.
   • CConfigure each remote network firewall to forward logs directly to Strata Logging Service using its own log forwarding profile.
   • DSet up Panorama as a log collector and then forward aggregated logs from Panorama to Strata Logging Service.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An organization is migrating from on-premises Panorama to SCM for Prisma Access management. They currently forward logs from Panorama to Strata Logging Service. After migration, what must the administrator do to ensure logs continue flowing to SLS?

   • AConfigure SLS to pull logs directly from the Panorama log collector.
   • BRecreate the log forwarding profiles in SCM and assign them to the appropriate policies.
   • CUse the Panorama-to-SCM migration tool to automatically transfer log forwarding profiles.
   • DKeep Panorama in the architecture solely for log forwarding to SLS.
   Reveal Solution Discussion Select an answer first