nerdexam
Palo_Alto_Networks

PCNSA · Question #130

An administrator is reviewing another administrator s Security policy log settings. Which log setting configuration is consistent with best practices tor normal traffic?

The correct answer is B. Log at Session Start disabled. When creating or editing a security rule, an option to log the transaction is available with two options, Log at Session Start or Log at Session End. For regular logging, the best practice is to log at session end. The reason for that is that applications are likely to change…

Submitted by saadiq_pk· Apr 18, 2026Policy Evaluation and Management

Question

An administrator is reviewing another administrator s Security policy log settings. Which log setting configuration is consistent with best practices tor normal traffic?

Options

  • ALog at Session Start and Log at Session End both enabled
  • BLog at Session Start disabled
  • CLog at Session Start enabled
  • DLog at Session Start and Log at Session End both disabled

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    93% (27)
  • D
    3% (1)

Explanation

When creating or editing a security rule, an option to log the transaction is available with two options, Log at Session Start or Log at Session End. For regular logging, the best practice is to log at session end. The reason for that is that applications are likely to change throughout the lifespan of the session.

Topics

#Logging#Security Policy#Log Management#Best Practices

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice