hardMultiple ChoiceObjective-mapped
PCNSA Practice Question: A firewall is configured to send logs to an…
A firewall is configured to send logs to an external syslog server. Some logs are missing, but other logs are arriving. Which step should be taken to troubleshoot this issue?
⚠ Common exam trap
Many exam-takers assume missing logs are always due to network or server issues (like buffer overflow or packet loss) rather than a configuration omission in the firewall's log forwarding profile.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify the log forwarding profile to ensure the missing log types are included.
The most common reason for missing logs when others arrive is that the log forwarding profile on the firewall does not include the specific log types (e.g., traffic, threat, system) that are missing. The firewall sends logs based on the configured forwarding profile, and if a log type is not selected in the profile, it will not be forwarded to the external syslog server. Verifying the profile ensures that the missing log types are enabled for forwarding.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Restart the syslog server to clear any buffer issues.
Why it's wrong here
Restarting may disrupt other logs.
- ✗
Enable packet capture on the firewall to verify the logs are sent.
Why it's wrong here
Packet capture is too broad and not efficient.
- ✓
Verify the log forwarding profile to ensure the missing log types are included.
Why this is correct
The log forwarding profile specifies which log types are forwarded.
- ✗
Disable logging on the firewall to reset the log queue.
Why it's wrong here
Disabling logging would stop all logs.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.