Palo Alto Networks Certified Network Security Administrator (PCNSA) — Question 294

An administrator is troubleshooting an issue with Office365 and expects that this traffic traverses the firewall.

When reviewing Traffic Log entries, there are no logs matching traffic from the test workstation.

What might cause this issue?

Answer options

• A. Office365 traffic is logged in the System Log.
• B. Office365 traffic is logged in the Authentication Log.
• C. Traffic matches the interzone-default rule, which does not log traffic by default.
• D. The firewall is blocking the traffic, and all blocked traffic is in the Threat Log.

Correct answer: C

Explanation

The correct answer is C because the interzone-default rule does not log traffic, which would explain the absence of entries for Office365 traffic in the Traffic Log. Option A and B are incorrect since they refer to different logs that do not capture the relevant traffic, and option D is also incorrect because it states that the firewall is blocking traffic, which is not necessarily the case if the traffic is simply not being logged.