exam questions

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 433 discussion

Actual exam question from Palo Alto Networks's PCNSE
Question #: 433
Topic #: 1
[All PCNSE Questions]

As a best practice, logging at session start should be used in which case?

  • A. While troubleshooting
  • B. Only on Deny rules
  • C. Only when log at session end is enabled
  • D. On all Allow rules
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Marshpillowz
1 year, 2 months ago
Selected Answer: A
A is correct
upvoted 1 times
...
jmolina777
2 years, 3 months ago
It could be "B", cause if you want to log a Deny policy you need to set Log at session start checkbox, but A is more accurate with the best practices. So it could be both but A is more accurated for question context.
upvoted 2 times
regnojispi
1 year, 6 months ago
Why would you want to log a deny policy at session start? It will just consume FW resources
upvoted 1 times
scanossa
9 months, 1 week ago
For deny rules, you log them at session start only, not session end.
upvoted 1 times
...
...
...
DenskyDen
2 years, 3 months ago
A. Logging at session start is usually used when troubleshooting applications that don't change over the course of the session, or applications that aren't recognized by the firewall. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC
upvoted 2 times
...
MR48
2 years, 4 months ago
Selected Answer: A
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clt5CAC#:~:text=Logging%20at%20session%20start%20is,on%20the%20management%20plane's%20CPU.
upvoted 2 times
...
confusion
2 years, 4 months ago
Selected Answer: A
A temporary when troubleshooting
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago