PCNSA Device Management and Services Practice Question
An administrator is configuring a Palo Alto Networks firewall to send logs to an external syslog server. The syslog server is reachable via a specific interface and virtual router. Which two configurations are required to ensure that syslog messages are sent from the correct source interface? (Choose two.)
⚠ Common exam trap
The trap here is thinking that the Syslog Server Profile includes a source interface setting, when actually the source interface is controlled via service routes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a Syslog Server Profile and assign it to the appropriate log forwarding settings.
To send logs to an external syslog server, you must configure a Syslog Server Profile and apply it to log forwarding settings. To control the source interface used for syslog messages, you must configure a service route for the syslog service, specifying the desired interface and virtual router. These two steps ensure that logs are sent from the correct interface. Security policies and Interface Management Profiles do not influence syslog source interface selection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a Syslog Server Profile and assign it to the appropriate log forwarding settings.
Why this is correct
A Syslog Server Profile defines the server address, port, and format. Assigning it to log forwarding settings (e.g., under Device > Log Settings) ensures that logs are sent to the external server. Without this profile, no logs are forwarded. This is a fundamental step for external logging.
- ✓
Configure a service route for the syslog service to use the desired source interface.
Why this is correct
Service routes allow you to specify which interface and virtual router the firewall uses for outbound management services like syslog. By configuring a service route for syslog, you ensure that logs are sent from the chosen source interface, meeting the requirement. This is the correct method to control the source interface.
- ✗
Specify the source interface in the Syslog Server Profile.
Why it's wrong here
The Syslog Server Profile does not include a source interface setting. The source interface for syslog messages is determined by the firewall's routing and the interface used to reach the syslog server. There is no direct option to specify a source interface in the profile.
- ✗
Enable syslog on the management interface via an Interface Management Profile.
Why it's wrong here
Interface Management Profiles control which services are allowed on an interface, but syslog is not a service that is enabled there. Syslog is an outbound logging service, not an inbound management service. Enabling it on the management interface is not applicable and does not control the source interface.
- ✗
Create a Security policy rule allowing syslog traffic from the firewall to the syslog server.
Why it's wrong here
Syslog traffic originates from the management plane, not the data plane. Security policy rules do not apply to management plane traffic. Therefore, a Security rule is not required and will not affect the source interface of syslog messages.
Go deeper
Related to this question
About these practice questions
One of 385 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Palo Alto Networks exam blueprint
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.