PCNSE Question #557: Real Exam Question with Answer & Explanation

Question

A firewall administrator has been tasked with ensuring that all Panorama-managed firewalls forward traffic logs to Panorama. In which section is this configured?

Options

• APanorama > Managed Devices
• BMonitor > Logs > Traffic
• CDevice Groups > Objects > Log Forwarding
• DTemplates > Device > Log Settings

Explanation

In Panorama, Log Forwarding profiles are configured as Objects within Device Groups (Device Groups > Objects > Log Forwarding). A Log Forwarding profile defines the destinations for each log type (traffic, threat, etc.) and can specify Panorama, syslog servers, SNMP traps, or email as targets. Once created at the Device Group level, the profile is referenced in Security policy rules within that Device Group - when traffic matches a rule, logs are forwarded per the attached profile. This Panorama-level configuration is then pushed to all member firewalls in the Device Group, ensuring uniform log forwarding behavior across the managed fleet. Option D (Templates > Device > Log Settings) configures system-level log settings (e.g., where to send system logs, authentication logs) rather than traffic log forwarding via security policy.

No community discussion yet for this question.