Exam PCNSE topic 1 question 595 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 595
Topic #: 1

An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an internal syslog server.

Where can the firewall engineer define the data to be added into each forwarded log?

A. Custom Log Format within Device > Server Profiles > Syslog
B. Built-in Actions within Objects > Log Forwarding Profile
C. Logging and Reporting Settings within Device > Setup > Management
D. Data Patterns within Objects > Custom Objects

Show Suggested Answer

Suggested Answer: A 🗳️

by b53fdf1 at March 28, 2024, 12:15 p.m.

Comments

Submit Cancel

b53fdf1

Highly Voted 1 year, 4 months ago

Selected Answer: A

I think the answer should be A. This is where you can add more data fields to logs.

upvoted 5 times

nebulanerd

1 year, 1 month ago

Totally agreement!

upvoted 1 times

...

Djeep12345

1 year, 4 months ago

correct. Anser is A. tested in lab

upvoted 2 times

...

Mtro

Most Recent 1 year, 2 months ago

B..Create new traffic log profile within the log forwarding profile. A not correct....this will make changes to the syslog server info.

upvoted 3 times

...

findkeywordcommand

1 year, 3 months ago

Selected Answer: A

To facilitate the integration with external log parsing systems, the firewall allows you to customize the log format; it also allows you to add custom Key: Value attribute pairs. Custom message formats can be configured under DeviceServer ProfilesSyslogSyslog Server ProfileCustom Log Format. https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/custom-logevent-format

upvoted 2 times

...

guest2be1

1 year, 4 months ago

It's A, in Syslog profile you can modify Facility

upvoted 2 times

...