nerdexam
Palo_Alto_Networks

PCSFE · Question #94

A cloud infrastructure architect wants to monitor NGFW in production running on Amazon Web Services (AWS). It is known that the software firewalls are able to publish native PAN-OS metrics to AWS…

The correct answer is A. IAM policy with action = "cloudwatch:PutMetricData" C. CloudWatch Monitoring with namespace = VMseries. https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series- firewall-on-aws/deploy-the-vm-series-firewall-on-aws/enable-cloudwatch-monitoring-on-the-vm-

Troubleshoot

Question

A cloud infrastructure architect wants to monitor NGFW in production running on Amazon Web Services (AWS). It is known that the software firewalls are able to publish native PAN-OS metrics to AWS CloudWatch. The cloud infrastructure architect is unable to browse any firewall metrics on CloudWatch. Which two features are needed to remediate this issue? (Choose two.)

Options

  • AIAM policy with action = "cloudwatch:PutMetricData"
  • BIAM policy with action = "cloudwatch:SharetMetricData"
  • CCloudWatch Monitoring with namespace = VMseries
  • DCloudWatch Monitoring with namespace = aws

How the community answered

(26 responses)
  • A
    85% (22)
  • B
    4% (1)
  • D
    12% (3)

Explanation

https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series- firewall-on-aws/deploy-the-vm-series-firewall-on-aws/enable-cloudwatch-monitoring-on-the-vm-

Topics

#CloudWatch#IAM policy#VM-Series metrics#AWS monitoring

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PCSFE Practice