PCNSE · Question #201
PAN-OS 7.0 introduced an automated correlation engine that analyzes log patterns and generates correlation events visible in the new Application Command Center (ACC). Which license must the firewall…
The correct answer is D. Threat Prevention. The automated correlation engine in PAN-OS 7.0, which generates correlation events in the ACC, requires a specific license to leverage new correlation objectives.
Question
PAN-OS 7.0 introduced an automated correlation engine that analyzes log patterns and generates correlation events visible in the new Application Command Center (ACC). Which license must the firewall have to obtain new correlation objectives?
Options
- AApplication Center
- BURL Filtering
- CGlobalProtect
- DThreat Prevention
How the community answered
(58 responses)- A2% (1)
- B7% (4)
- C3% (2)
- D88% (51)
Why each option
The automated correlation engine in PAN-OS 7.0, which generates correlation events in the ACC, requires a specific license to leverage new correlation objectives.
Application Center (ACC) is a graphical reporting and monitoring interface, not a license that enables security correlation objectives.
The URL Filtering license is used for categorizing and enforcing policies on web traffic, not for generalized log pattern correlation or threat intelligence.
The GlobalProtect license enables secure remote access VPN functionality for mobile users and branch offices, which is unrelated to correlation objectives.
The Threat Prevention license is required for the firewall to obtain and utilize new correlation objectives, as it provides the necessary threat intelligence, signatures, and engines for identifying and correlating security events.
Concept tested: PAN-OS Threat Prevention license for correlation engine
Source: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/how-threat-prevention-works.html
Topics
Community Discussion
No community discussion yet for this question.