Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 337

As a best practice, logging at session start should be used in which case?

Answer options

• A. While troubleshooting
• B. Only on Deny rules
• C. Only when log at session end is enabled
• D. On all Allow rules

Correct answer: A

Explanation

Logging at session start is crucial during troubleshooting as it helps identify issues from the beginning of a session. The other options are not best practices; for instance, only logging on Deny rules or when log at session end is enabled does not provide comprehensive visibility into session activities.