Palo Alto Networks NGFW Engineer — Question 19

An NGFW engineer is configuring multiple Panorama-managed firewalls to start sending all logs to Strata Logging Service. The Strata Logging Service instance has been provisioned, the required device certificates have been installed, and Panorama and the firewalls have been successfully onboarded to Strata Logging Service.
Which configuration task must be performed to start sending the logs to Strata Logging Service and continue forwarding them to the Panorama log collectors as well?

Answer options

• A. Modify all active Log Forwarding profiles to select the “Cloud Logging” option in each profile match list in the appropriate device groups.
• B. Enable the “Panorama/Cloud Logging” option in the Logging and Reporting Settings section under Device --> Setup --> Management in the appropriate templates.
• C. Select the “Enable Duplicate Logging” option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.
• D. Select the “Enable Cloud Logging” option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.

Correct answer: C

Explanation

The correct answer is C, as selecting the 'Enable Duplicate Logging' option allows logs to be sent to both the Strata Logging Service and the Panorama log collectors simultaneously. Options A, B, and D do not achieve this dual logging requirement, as they focus on different logging configurations without enabling the necessary duplication.