It could be "B", cause if you want to log a Deny policy you need to set Log at session start checkbox, but A is more accurate with the best practices. So it could be both but A is more accurated for question context.
A. Logging at session start is usually used when troubleshooting applications that don't change over the course of the session, or applications that aren't recognized by the firewall. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC
This section is not available anymore. Please use the main Exam Page.PCNSE Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Marshpillowz
1 year, 2 months agojmolina777
2 years, 3 months agoregnojispi
1 year, 6 months agoscanossa
9 months, 1 week agoDenskyDen
2 years, 3 months agoMR48
2 years, 4 months agoconfusion
2 years, 4 months ago