Palo Alto Networks Exam PCNSE Topic 9 Question 103 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam

Question #: 103
Topic #: 9

All firewall at a company are currently forwarding logs to Palo Alto Networks log collectors. The company also wants to deploy a sylog server and forward all firewall logs to the syslog server and to the log collectors. There is known logging peak time during the day, and the security team has asked the firewall engineer to determined how many logs per second the current Palo Alto Networking log processing at that particular time. Which method is the most time-efficient to complete this task?

ANavigate to Panorama > Managed Collectors, and open the Statistics windows for each Log Collector during the peak time.

BNavigate to Monitor > Unified logs, set the filter to the peak time, and browse to the last page to find out how many logs have been received.

CNavigate to Panorama> Managed Devices> Health, open the Logging tab for each managed firewall and check the log rates during the peak time.

DNavigate to ACC> Network Activity, and determine the total number of sessions and threats during the peak time.

Show Suggested Answer

Suggested Answer: A

by Catherin at Nov 14, 2024, 10:11 AM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maricela

1 months ago

I'd choose Option C, but I'm still trying to figure out why the firewall engineer didn't just set up some kind of logging alert in the first place.

upvoted 0 times

Francoise

9 days ago

I think Option A might be more time-efficient since you can quickly see the statistics for all log collectors at once.

upvoted 0 times

...

Lenita

13 days ago

Option C is a good choice, but maybe they didn't set up alerts because they wanted to manually check during peak times.

upvoted 0 times

...

Margart

1 months ago

Option C is the clear winner here. Unless you want to spend the entire peak time period scrolling through logs, that is.

upvoted 0 times

...

Vivan

1 months ago

Option C is the way to go. Who wants to spend all day navigating through various Palo Alto menus when you can just look at the firewall logging tabs?

upvoted 0 times

Paola

17 days ago

Let's make it easy on ourselves and just stick to checking the logging tabs on the managed firewalls.

upvoted 0 times

...

Gary

18 days ago

It's all about saving time, especially during peak logging hours. Option C is the way to go.

upvoted 0 times

...

Willow

22 days ago

I agree, checking the log rates directly on the firewall is much quicker than going through Panorama or ACC.

upvoted 0 times

...

Georgeanna

29 days ago

Option C is definitely the most efficient method. No need to waste time navigating through multiple menus.

upvoted 0 times

...

Aretha

1 months ago

I'll have to go with Option C. Checking the firewall logging tabs sounds a lot quicker than digging through the logs or hunting for session data.

upvoted 0 times

...

Claribel

1 months ago

I'm not sure, I think option C could also be a good method to determine the log rates during peak time.

upvoted 0 times

...

Ulysses

1 months ago

I agree with Lili, checking the Statistics windows for each Log Collector seems like the best approach.

upvoted 0 times

...

Roslyn

2 months ago

I'm not sure why we need to go through Panorama when we can just check the logging stats on the firewalls themselves. Option C looks like the fastest approach.

upvoted 0 times

...