Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 264

An administrator has configured PAN-OS SD-WAN and has received a request to find out the reason for a session failover for a session that has already ended.
Where would you find this in Panorama or firewall logs?

Answer options

• A. System Logs
• B. Session Browser
• C. You cannot find failover details on closed sessions
• D. Traffic Logs

Correct answer: D

Explanation

The correct answer is D, as Traffic Logs keep track of all traffic sessions, including failover events. Option A, System Logs, generally contain system-level events but not specific session details. Option B, Session Browser, is used to view active sessions, and option C incorrectly states that failover details cannot be found, which is not true for Traffic Logs.