nerdexam
Palo_Alto_Networks

PCNSA · Question #400

When is an event displayed under threat logs?

The correct answer is A. When traffic matches a corresponding Security Profile. Threat logs are generated only when traffic matches a Security policy rule that has a corresponding Security Profile attached (e.g., Antivirus, Anti-Spyware, Vulnerability Protection, URL Filtering, File Blocking, WildFire). Simply matching a Security policy rule (B) does not cre

Submitted by miguelv· Apr 18, 2026Securing Traffic

Question

When is an event displayed under threat logs?

Options

  • AWhen traffic matches a corresponding Security Profile
  • BWhen traffic matches any Security policy
  • CEvery time a session is blocked
  • DEvery time the firewall drops a connection

How the community answered

(32 responses)
  • A
    88% (28)
  • B
    3% (1)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Threat logs are generated only when traffic matches a Security policy rule that has a corresponding Security Profile attached (e.g., Antivirus, Anti-Spyware, Vulnerability Protection, URL Filtering, File Blocking, WildFire). Simply matching a Security policy rule (B) does not create a threat log - the rule must also invoke a Security Profile that inspects the content and detects a threat. Not every blocked session (C) or dropped connection (D) generates a threat log; those events are typically captured in Traffic logs. Threat logs are specifically for content-inspection findings triggered by Security Profiles.

Topics

#Threat Logging#Security Profiles#Log Generation

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice