PCNSE · Question #705
Which two profiles should be configured when sharing tags from threat logs with a remote User- ID agent? (Choose two.)
The correct answer is C. HTTP D. Log Forwarding. To share tags derived from threat logs with a remote User-ID agent, two profiles are needed: (1) An HTTP profile, which defines the connection parameters (URL, headers, authentication) for the HTTP-based tag-sharing endpoint on the remote User-ID agent; and (2) a Log Forwarding p
Question
Which two profiles should be configured when sharing tags from threat logs with a remote User- ID agent? (Choose two.)
Options
- ALDAP
- BLog Ingestion
- CHTTP
- DLog Forwarding
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C93% (28)
Explanation
To share tags derived from threat logs with a remote User-ID agent, two profiles are needed: (1) An HTTP profile, which defines the connection parameters (URL, headers, authentication) for the HTTP-based tag-sharing endpoint on the remote User-ID agent; and (2) a Log Forwarding profile, which specifies which logs trigger tag actions and references the HTTP profile as the forwarding destination. LDAP (A) is used for directory integration, not tag sharing. Log Ingestion (B) is not a standard Palo Alto profile type in this context.
Topics
Community Discussion
No community discussion yet for this question.