Palo Alto Networks SSE Engineer — Question 11

Strata Logging Service is configured to forward logs to an external syslog server; however, a month later, there is a disruption on the syslog server.
Which action will send the missing logs to the external syslog server?

Answer options

• A. Configure a replay profile with the affected time range and associate it with the affected syslog server profile.
• B. Delete the affected syslog server profile and create a new one.
• C. Export the logs from Strata Logging Service, and then manually import them to the syslog server.
• D. Configure a log filter under the syslog server profile with the affected time range.

Correct answer: A

Explanation

The correct answer is A because configuring a replay profile allows you to resend the logs from the specified time range to the external syslog server. Option B is incorrect as creating a new profile does not address the issue of missing logs. Option C is not ideal since manual import does not utilize the logging service's capabilities effectively. Option D does not resend missing logs, but only filters future logs.