PCNSE Manage, Monitor and Operate Practice Question
Exhibit
admin@PA-5050> show running security-policy
rule 1 {
name: "Allow Web";
source: [192.168.1.0/24];
destination: [any];
application: [web-browsing];
action: allow;
log-start: no;
log-end: yes;
log-setting: "syslog-forwarding-profile";
}Refer to the exhibit. A network engineer notices that logs for this rule are not being forwarded to the external syslog server. The syslog server profile is configured correctly. What is the most likely cause?
⚠ Common exam trap
Palo Alto distinguishes between the Log Forwarding profile (which links a rule to a syslog server profile) and the syslog server profile itself. Candidates often assume a correctly configured server profile alone ensures logs are forwarded, but the rule must have a Log Forwarding profile assigned that maps to that server profile.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The log-setting profile "syslog-forwarding-profile" is missing from the Log Forwarding profiles configuration.
The rule's log forwarding behavior is controlled by the Log Forwarding profile, not the Log Setting profile directly. The Log Setting profile 'syslog-forwarding-profile' must be selected in the Log Forwarding profile configuration to map the rule's logs to the external syslog server. Without this mapping, logs are generated but not forwarded to the syslog server, even if the server profile itself is correctly configured.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The log-setting profile "syslog-forwarding-profile" is missing from the Log Forwarding profiles configuration.
Why this is correct
The referenced Log Forwarding profile must be defined to enable forwarding.
- ✗
The rule does not specify a destination zone.
Why it's wrong here
Zones are not a prerequisite for log forwarding.
- ✗
The log-start is set to no, preventing session start logs from being generated.
Why it's wrong here
Even with log-start disabled, session end logs are generated and should be forwarded.
- ✗
The application web-browsing does not generate logs.
Why it's wrong here
All applications generate logs when logging is enabled.
Go deeper
Related to this question
About these practice questions
This PCNSE question is part of Courseiva's 504-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.