Courseiva
← PCNSE
Full test
Manage, Monitor and Operate →mediumMultiple ChoiceObjective-mapped

PCNSE Manage, Monitor and Operate Practice Question

Exhibit

Refer to the exhibit.
admin@PA-500> show running security-policy
rule 1: name "Allow-Outbound" from "Internal" to "External" source "10.0.0.0/8" destination "any" application "any" service "any" action "allow" log-start "no" log-end "no" log-forward "Log-to-Panorama"

The security policy rule shown in the exhibit has log-start and log-end both set to 'no', but a log-forwarding profile is configured. Which statement best describes the logging behavior for sessions matching this rule?

⚠ Common exam trap

It's easy for candidates to assume a log-forwarding profile overrides the log-start/log-end settings, but in PAN-OS, the profile only forwards logs that are already enabled by those flags.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Sessions are not logged because logging is disabled.

When both log-start and log-end are set to 'no' in a security policy rule, session logging is disabled regardless of any log-forwarding profile attached. The log-forwarding profile only specifies where logs are sent if logging is enabled; it does not override the explicit logging disable. Therefore, no session logs are generated for this rule.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Sessions are logged only if the session duration exceeds a threshold.

    Why it's wrong here

    There is no such threshold configuration; logging is controlled by log-start/log-end settings.

  • ✗

    Sessions are logged to Panorama immediately when the session starts.

    Why it's wrong here

    log-start is disabled, so no log is created at session start.

  • ✓

    Sessions are not logged because logging is disabled.

    Why this is correct

    Without log-start or log-end, no logs are generated, so forwarding does nothing.

  • ✗

    Sessions are logged to Panorama only when the session ends.

    Why it's wrong here

    log-end is disabled, so no log is created at session end.

About these practice questions

Courseiva writes every PCNSE question from scratch — 504 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.