PCNSE · Question #4
A logging infrastructure may need to handle more than 10,000 logs per second. Which two options support a dedicated log collector function? (Choose two)
The correct answer is B. M-500 D. M-100. To handle over 10,000 logs per second, dedicated M-Series appliances are suitable for log collection.
Question
A logging infrastructure may need to handle more than 10,000 logs per second. Which two options support a dedicated log collector function? (Choose two)
Options
- APanorama virtual appliance on ESX(i) only
- BM-500
- CM-100 with Panorama installed
- DM-100
How the community answered
(35 responses)- A9% (3)
- B80% (28)
- C11% (4)
Why each option
To handle over 10,000 logs per second, dedicated M-Series appliances are suitable for log collection.
A Panorama virtual appliance can act as a log collector, but specifying 'on ESX(i) only' is an unnecessary restriction, and without context on its configuration, it doesn't definitively guarantee the high performance of a dedicated M-series appliance.
The M-500 is a dedicated Palo Alto Networks M-Series appliance designed for high-performance log collection and management, capable of handling large volumes of logs, including those exceeding 10,000 per second.
While an M-100 can host Panorama, this choice implies a dual management and logging role, whereas the M-Series appliances are specifically designed to support a dedicated log collector function when configured as such.
The M-100 is also a Palo Alto Networks M-Series appliance that can function as a dedicated Log Collector, providing the necessary capacity for high-volume log ingestion and storage within a centralized logging infrastructure.
Concept tested: Palo Alto Networks M-Series Log Collector capabilities
Source: https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/panorama-overview/m-series-appliances
Topics
Community Discussion
No community discussion yet for this question.