B is correct
For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile.
For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings.
B is correct. Set up for forwarding any management traffic logs such as User-ID, configuration logs, system logs, IP-Tag logs, GlobalProtect logs is under Device --> Log Settings, not under Objects --> Log Forwarding profile. Objects --> Log Forwarding profile is used for forwarding of data plane traffic logs (don't confuse which plane handles logging...logging and reporting is always handled by management plane, here I'm talking about type of traffic, whether it's data plane traffic or management plane traffic). So Log Forwarding profile under Objects is used to set up log forwarding for traffic logs, threat logs, wildfire logs etc.
"D" - Correct Answer
Step-1 Depending on the type of log you want to use for tagging, create a log forwarding profile or configure the log settings to define how you want the firewall or Panorama to handle logs.
For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile.
For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings.
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/policy/use-auto-tagging-to-automate-security-actions
Hi ChiaPet75,
referring the link you provide and reading the question carefully the correct answer is B configuring a log setting as it is clearly stated on the second bullet.
Depending on the type of log you want to use for tagging, create a log forwarding profile or configure the log settings to define how you want the firewall or Panorama to handle logs.
For Authentication, Data, Threat, Traffic, Tunnel Inspection, URL, and WildFire logs, create a log forwarding profile.
For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings.
It's not a very well-worded question, but the answer is B.
As you posted, "For User-ID, GlobalProtect, and IP-Tag logs, configure the log settings."
The question is about User-ID, so the answer is "log settings".
To see what they are talking about, I looked at Device/Log Settings. This has a bunch of sections including one called "User-ID". In there is a pane entitled "Built-in Actions". If you click "Add", you can give the action a name, set the action to "add tag", and select a tag. I made a screencap: https://imgur.com/gallery/oSnvqpV
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Cro13
Highly Voted 11 months agobetko
Most Recent 10 months, 3 weeks agoMarshpillowz
1 year, 3 months agoViriathus
1 year, 4 months agorischa
1 year, 4 months agoAndromeda1800
1 year, 4 months agoAndromeda1800
1 year, 4 months agoMcMarius11
1 year, 6 months agoagu77
1 year, 8 months agoagu77
1 year, 8 months agopavtoor
1 year, 8 months agoChiaPet75
1 year, 8 months agoavator
1 year, 3 months agoavator
1 year, 3 months agohomersimpson
1 year, 4 months ago