nerdexam
Palo_Alto_NetworksPalo_Alto_Networks

PCNSE · Question #877

PCNSE Question #877: Real Exam Question with Answer & Explanation

Sign in or unlock PCNSE to reveal the answer and full explanation for question #877. The question stem and answer options stay visible for context.

Submitted by carlos_mx· Apr 18, 2026Configuration Troubleshooting

Question

A firewall administrator configures the HIP profiles on the edge firewall where GlobalProtect is enabled, and adds the profiles to security rules. The administrator wants to redistribute the HIP reports to the data center firewalls to apply the same access restrictions using HIP profiles. However, the administrator can only see the HIP match logs on the edge firewall but not on the data center firewall. What are two reasons why the administrator is not seeing HIP match logs on the data center firewall? (Choose two.)

Options

  • AHIP profiles are configured but not added to security rules in the data center firewall.
  • BUser ID is not enabled in the Zone where the users are coming from in the data center firewall.
  • CHIP Match log forwarding is not configured under Log Settings in the device tab.
  • DLog Forwarding Profile is configured but not added to security rules in the data center firewall.

Unlock PCNSE to see the answer

You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#GlobalProtect#HIP Profiles#Log Forwarding#Security Rules
Full PCNSE PracticeBrowse All PCNSE Questions