NetSec-Architect Practice Question: Centralized Management And Security Automation AT Scale
An architect is troubleshooting log collection on a Dedicated Log Collector. Firewalls are successfully forwarding logs, but Panorama's monitoring tab is not displaying reports. The architect checks the log collector status and sees that log forwarding from the collector to Panorama is failing. Which service or daemon handles the inter-communication between Dedicated Log Collectors and Panorama?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The log-collector and config-d daemons communicating over TCP port 3978 and related control ports.
The Log Collector communicates with Panorama management via the log-collector and collector management daemons, utilizing specific SSL certificates and TCP ports (such as 3978 for logging and management control).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The syslog-ng daemon operating over UDP port 514.
Why it's wrong here
PAN-OS internal log communication uses secure proprietary protocols over TCP 3978, not raw plaintext syslog over UDP 514.
- ✗
The tftpd daemon transferring compressed binary logs.
Why it's wrong here
TFTP is not used for log collection or synchronization.
- ✗
The snmpd daemon transmitting traps via UDP port 162.
Why it's wrong here
SNMP is not used for Panorama-to-collector log data synchronization.
- ✓
The log-collector and config-d daemons communicating over TCP port 3978 and related control ports.
Why this is correct
TCP port 3978 is the standard SSL-encrypted port used for log forwarding and communication between firewalls/collectors and Panorama.
About these practice questions
This NetSec-Architect question is part of Courseiva's 228-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Palo Alto Networks exam blueprint
This NetSec-Architect practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NetSec-Architect exam.