exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 360 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 360
Topic #: 1
[All PCNSE Questions]

Which Panorama feature protects logs against data loss if a Panorama server fails?

  • A. Panorama Collector Group with Log Redundancy ensures that no logs are lost if a server fails inside the Collector Group.
  • B. Panorama Collector Group automatically ensures that no logs are lost if a server fails inside the Collector Group.
  • C. Panorama HA with Log Redundancy ensures that no logs are lost if a server fails inside the HA Cluster.
  • D. Panorama HA automatically ensures that no logs are lost if a server fails inside the HA Cluster.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Pistgilloni
Highly Voted 2 years, 8 months ago
Selected Answer: A
Redundancy ensures that no logs are lost if any one Log Collector becomes unavailable. https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-log-collection/manage-collector-groups/configure-a-collector-group
upvoted 8 times
nose999
2 years, 8 months ago
You're right should be A, not sure why I chose B before
upvoted 3 times
...
Alen
2 years, 7 months ago
A is correct as per url above. "Log redundancy is available only if each Log Collector has the same number of logging disks." (Recommended) Enable log redundancy across collectors if you are adding multiple Log Collectors to a single Collector group. Redundancy ensures that no logs are lost if any one Log Collector becomes unavailable. Each log will have two copies and each copy will reside on a different Log Collector. For example, if you have two Log Collectors in the collector group the log is written to both Log Collectors. Enabling redundancy creates more logs and therefore requires more storage capacity, reducing storage capability in half. When a Collector Group runs out of space, it deletes older logs. Redundancy also doubles the log processing traffic in a Collector Group, which reduces its maximum logging rate by half, as each Log Collector must distribute a copy of each log it receives.
upvoted 3 times
...
duckduckgooo
2 years, 1 month ago
Updated URL https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/manage-log-collection/manage-collector-groups/configure-a-collector-group
upvoted 1 times
...
...
StevenWilliams0728
Most Recent 4 months, 1 week ago
Selected Answer: D
These are questions that need to be removed from exams. For one, not all orgs are running separate log collector groups. Also the question states "if a PANORAMA server fails" not if a log collector fails....This is why people give up on certs anymore, too many tricks, not enough treats.
upvoted 2 times
...
corpguy
4 months, 1 week ago
Selected Answer: D
It has to be D, the question states that a Panorama server is failing, not a log collector. It would be A for a log collector failing.
upvoted 1 times
...
SCCUser
4 months, 2 weeks ago
Selected Answer: D
Setting up Panorama in an HA configuration provides redundancy for log collection. Because the managed firewalls are connected to both Panorama peers over SSL, when a state change occurs, each Panorama sends a message to the managed firewalls. The firewalls are notified of the Panorama HA state and can forward logs accordingly.
upvoted 2 times
...
corpguy
6 months, 2 weeks ago
Selected Answer: D
This is a question about Panorma HA not log collectors.
upvoted 1 times
...
JRKhan
1 year, 4 months ago
Selected Answer: A
A is correct. For people opting for D, Panorama HA ensure log *collection* redundancy but doesnt provide redundancy for log data that has already been collected.
upvoted 2 times
...
34f7d3a
1 year, 5 months ago
Selected Answer: D
Setting up Panorama in an HA configuration provides redundancy for log collection. https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/panorama-high-availability/logging-considerations-in-panorama-ha
upvoted 2 times
...
Kris92
1 year, 6 months ago
Selected Answer: D
A is true, but the question is if Panorama fails, not if a log collector fails. You can't have panorama and log collectors in the same collector group. If you have dedicated collector groups then panorama failing will not affect log collection. Setting up Panorama in an HA configuration provides redundancy for log collection. Because the managed firewalls are connected to both Panorama peers over SSL, when a state change occurs, each Panorama sends a message to the managed firewalls. The firewalls are notified of the Panorama HA state and can forward logs accordingly. https://docs.paloaltonetworks.com/panorama/11-0/panorama-admin/panorama-high-availability/logging-considerations-in-panorama-ha
upvoted 1 times
...
electro165
1 year, 8 months ago
Selected Answer: A
When you configure a Collector Group with Log Redundancy in Panorama, it ensures that log data is stored redundantly across multiple Collector Log Servers within the Collector Group. This redundancy ensures that log data is preserved even if one of the servers within the Collector Group fails. This feature is crucial for log data integrity and availability in case of server failures.
upvoted 1 times
...
MrR0bot
2 years, 3 months ago
Selected Answer: A
A according to this one https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/caveats-for-a-collector-group-with-multiple-log-collectors
upvoted 1 times
...
dogeatdog
2 years, 5 months ago
Selected Answer: A
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/manage-log-collection/manage-collector-groups/configure-a-collector-group
upvoted 1 times
...
awtsuritacuna
2 years, 5 months ago
Option A Redundancy ensures that no logs are lost if any one Log Collector becomes unavailable. Each log will have two copies and each copy will reside on a different Log Collector. For example, if you have two Log Collectors in the collector group the log is written to both Log Collectors. https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-log-collection/manage-collector-groups/configure-a-collector-group
upvoted 1 times
...
jonner
2 years, 6 months ago
A If you select this option, each log in the Collector Group will have two copies and each copy will reside on a different Log Collector. This redundancy ensures that, if any one Log Collector becomes unavailable, no logs are lost: you can see all the logs forwarded to the Collector Group and run reports for all the log data. Log redundancy is available only if the Collector Group has multiple Log Collectors and each Log Collector has the same number of disks. Log redundancy applies only to newly ingested logs after the setting is enabled and not to existing logs. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/panorama-web-interface/panorama-collector-groups/collector-group-configuration#id763001e8-ea88-4223-99bc-7d3604b8defe
upvoted 1 times
...
TAKUM1y
2 years, 6 months ago
Selected Answer: A
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/caveats-for-a-collector-group-with-multiple-log-collectors#:~:text=Enable%20log%20redundancy%20when%20you%20Configure%20a%20Collector%20Group.%20This%20ensures%20that%20no%20logs%20are%20lost%20if%20any%20one%20Log%20Collector%20in%20the%20Collector%20Group%20becomes%20unavailable.%20Each%20log%20will%20have%20two%20copies%20and%20each%20copy%20will%20reside%20on%20a%20different%20Log%20Collector.
upvoted 3 times
...
confusion
2 years, 6 months ago
Selected Answer: A
A https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-overview/centralized-logging-and-reporting/caveats-for-a-collector-group-with-multiple-log-collectors#:~:text=Enable%20log%20redundancy%20when%20you%20Configure%20a%20Collector%20Group.%20This%20ensures%20that%20no%20logs%20are%20lost%20if%20any%20one%20Log%20Collector%20in%20the%20Collector%20Group%20becomes%20unavailable.%20Each%20log%20will%20have%20two%20copies%20and%20each%20copy%20will%20reside%20on%20a%20different%20Log%20Collector.
upvoted 2 times
...
TAKUM1y
2 years, 7 months ago
Selected Answer: D
https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/panorama-high-availability/logging-considerations-in-panorama-ha
upvoted 2 times
halifax
2 years, 1 month ago
I don't think Palo Alto firewalls in high availability (HA) mode synchronize log files. I think the HA is just to sync configuration and state table.
upvoted 1 times
...
javim
2 years, 4 months ago
I agree!
upvoted 1 times
...
...
GBD35055
2 years, 7 months ago
I can't find anything about a Panorama "Cluster". Their is Panorama HA pair but not Cluster. SO I think any answer referring to a Panorama Cluster is wrong.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...