answer is B ?
Palo Alto says
The CloudWatch Log Group and Kinesis Data Firehose have a default value of PaloAltoCloudNGFW in the CFT. The S3 Bucket has no default. The Cloud NGFW does not create these resources in your AWS environment. The CFT gives the Cloud NGFW the permissions to write the logs to the destination. A destination with name you provided in the CFT must exist in your deployment to successfully capture NGFW logs.
answer is B
https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-and-endpoints/configure-logging-for-the-cloud-ngfw-on-aws
I don't 100% sure. The next text say S3 has no default log destination.
"The CloudWatch Log Group and Kinesis Data Firehose have a default value of PaloAltoCloudNGFW
in the CFT. The S3 Bucket has no default. The Cloud NGFW does not create these resources in your AWS environment. The CFT gives the Cloud NGFW the permissions to write the logs to the destination. A destination with name you provided in the CFT must exist in your deployment to successfully capture NGFW logs."
https://docs.paloaltonetworks.com/cloud-ngfw/aws/cloud-ngfw-on-aws/create-cloud-ngfw-instances-and-endpoints/configure-logging-for-the-cloud-ngfw-on-aws
upvoted 1 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
commit666
2 months agoInfoSec_RC53
2 months, 3 weeks agojaydvbb
4 months, 1 week agojavim
3 months, 2 weeks ago