Exam PCSFE topic 1 question 111 discussion

Actual exam question from Palo Alto Networks's PCSFE

Question #: 111
Topic #: 1

A cloud infrastructure architect wants to monitor NGFW in production running on Amazon Web Services (AWS). It is known that the software firewalls are able to publish native PAN-OS metrics to AWS CloudWatch. The cloud infrastructure architect is unable to browse any firewall metrics on CloudWatch.

Which two features are needed to remediate this issue? (Choose two.)

A. IAM policy with action = "cloudwatch:PutMetricData"
B. IAM policy with action = "cloudwatch:SharetMetricData"
C. CloudWatch Monitoring with namespace = VMseries
D. CloudWatch Monitoring with namespace = aws

Show Suggested Answer

Suggested Answer: AC 🗳️

by VanFanel at March 21, 2024, 11:14 a.m.

Comments

Submit Cancel

VanFanel

10 months ago

Selected Answer: AC

AC probably correct: https://docs.paloaltonetworks.com/vm-series/11-1/vm-series-deployment/set-up-the-vm-series-firewall-on-aws/deploy-the-vm-series-firewall-on-aws/enable-cloudwatch-monitoring-on-the-vm-series-firewall

upvoted 1 times

javim

9 months, 3 weeks ago

I think you are right. "Edit the IAM role to grant the following permissions: "Action": [ "cloudwatch:PutMetricData"" Answer is A "Enter the CloudWatch Namespace to which the firewall can publish metrics. The namespace cannot begin with AWS." Answer is C

upvoted 1 times

...