PCNSA Device Management and Services Practice Question
An administrator configures log forwarding to send traffic logs to a syslog server. After applying the log forwarding profile to the security policy, logs are not appearing at the syslog server. The administrator verifies that the syslog server is reachable from the firewall's management IP by using ping, and that the syslog service is running on the server. What is the most likely cause?
⚠ Common exam trap
It's easy for candidates to assume reachability (ping) and a running syslog service are sufficient, overlooking the mandatory server profile configuration that ties the log forwarding profile to an actual syslog destination.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The syslog server is not configured in the Server Profiles.
Log forwarding in Palo Alto Networks firewalls requires a syslog server profile to be configured under Device > Server Profiles > Syslog. Without this profile, the firewall has no destination address or port to send logs to, even if the syslog server is reachable via ping. The log forwarding profile references the server profile; if the server profile is missing or misconfigured, logs will not be forwarded.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The security policy matching the traffic does not have logging enabled.
Why it's wrong here
Applying a log forwarding profile implies logging is enabled.
- ✗
The firewall's data port IP is not used for logging.
Why it's wrong here
Logs are sent from the management IP, not data port IP.
- ✓
The syslog server is not configured in the Server Profiles.
Why this is correct
The server profile must exist before it can be referenced.
- ✗
The log forwarding profile is not committed.
Why it's wrong here
Changes are typically committed, and commit errors would be obvious.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCNSA question from scratch — 516 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.