Exam PCNSE topic 1 question 601 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 601
Topic #: 1

A root cause analysis investigation into a recent security incident reveals that several decryption rules have been disabled. The security team wants to generate email alerts when decryption rules are changed.

How should email log forwarding be configured to achieve this goal?

A. With the relevant system log filter inside Device > Log Settings
B. With the relevant configuration log filter inside Device > Log Settings
C. With the relevant configuration log filter inside Objects > Log Forwarding
D. With the relevant system log filter inside Objects > Log Forwarding

Show Suggested Answer

Suggested Answer: B 🗳️

by hcir at March 30, 2024, 9:35 a.m.

Comments

Submit Cancel

PacketsDownRange99

2 months, 4 weeks ago

Selected Answer: B

B. https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/configure-email-alerts

upvoted 3 times

...

tobaja

3 months ago

Log forwarding does not seem possible for configuration logs. Does show up at Device > Log Settings, so answer B.

upvoted 1 times

...

hcir

3 months, 3 weeks ago

B. Config related logs are generated by the management plane, hence in the device section

upvoted 3 times

...

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 601 discussion

Comments

PacketsDownRange99

tobaja

hcir

SY0-701