The answer is to configure log auto-deletion in the Log Settings to purge logs older than a specified period. This is correct because it directly addresses the high disk usage on the /opt/panlogs partition by automating the removal of aged logs based on a retention policy, ensuring that important recent log data is preserved while reclaiming space without manual intervention. On the Palo Alto Networks Certified Network Security Engineer PCNSE exam, this scenario tests your understanding of log management and disk space monitoring, as the firewall’s /opt/panlogs partition is a common bottleneck that fills quickly with traffic logs. A common trap is to manually delete log files or clear the partition, which can corrupt the log database or violate compliance requirements; instead, the exam expects you to use the built-in auto-deletion feature for controlled, policy-driven cleanup. Remember the mnemonic “Auto Age, Not Manual Rage” to recall that automated retention settings are the safest first step for freeing disk space on /opt/panlogs.
PCNSE Manage, Monitor and Operate Practice Question
This PCNSE practice question tests your understanding of manage, monitor and operate. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Exhibit
Refer to the exhibit.
admin@PA-5000> show system resources
CPU: 15% used
Memory: 45% used
Disk: /dev/sda1 85% used
admin@PA-5000> show logging-status
Disk space usage:
/opt/pancfg: 70% used
/opt/panlogs: 92% used
Refer to the exhibit. The firewall's disk usage is at 85% overall, and the /opt/panlogs partition is at 92%. The administrator wants to free up space without losing important log data. Which action should be taken first?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "first"
Why it matters: Order matters here. You are being tested on which action comes before the others — not which action is generally useful.
Refer to the exhibit.
admin@PA-5000> show system resources
CPU: 15% used
Memory: 45% used
Disk: /dev/sda1 85% used
admin@PA-5000> show logging-status
Disk space usage:
/opt/pancfg: 70% used
/opt/panlogs: 92% used
A
Configure log auto-deletion in the Log Settings to purge logs older than a specified period
Auto-deletion frees space by removing old logs.
B
Add an external storage device to the firewall
Why wrong: Not all models support external storage; auto-deletion is simpler.
C
Delete configuration files from /opt/pancfg
Why wrong: Configuration files should not be deleted; they are essential.
D
Delete the /opt/panlogs directory and recreate it
Why wrong: Deleting the directory would cause loss of all logs and may break functionality.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure log auto-deletion in the Log Settings to purge logs older than a specified period
Option A is correct because configuring log auto-deletion in the Log Settings allows the administrator to automatically purge older logs based on a specified retention period, freeing up disk space on the /opt/panlogs partition without manually deleting important log data. This is the safest and most controlled method, as it respects the firewall's log management policies and ensures compliance with data retention requirements.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Configure log auto-deletion in the Log Settings to purge logs older than a specified period
Why this is correct
Auto-deletion frees space by removing old logs.
Clue confirmation
The clue word "first" in the question point toward this answer.
Related concept
Read the scenario before looking for a memorised answer.
✗
Add an external storage device to the firewall
Why it's wrong here
Not all models support external storage; auto-deletion is simpler.
✗
Delete configuration files from /opt/pancfg
Why it's wrong here
Configuration files should not be deleted; they are essential.
✗
Delete the /opt/panlogs directory and recreate it
Why it's wrong here
Deleting the directory would cause loss of all logs and may break functionality.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Palo Alto Networks often tests the misconception that deleting configuration files or directories is a valid troubleshooting step, when in fact the correct approach is to use built-in log management features like auto-deletion to safely reclaim space without data loss.
Detailed technical explanation
How to think about this question
The /opt/panlogs partition stores firewall logs (traffic, threat, URL filtering, etc.) in a database format (e.g., SQLite or proprietary). Log auto-deletion uses a scheduled job that deletes log entries older than the configured retention period (e.g., 30 days) by issuing SQL DELETE commands or truncating log files, which reclaims space without affecting active logging. In a real-world scenario, an administrator might set a retention policy of 90 days to comply with regulatory requirements while preventing disk exhaustion.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A practitioner preparing for the PCNSE exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Manage, Monitor and Operate — This question tests Manage, Monitor and Operate — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Configure log auto-deletion in the Log Settings to purge logs older than a specified period — Option A is correct because configuring log auto-deletion in the Log Settings allows the administrator to automatically purge older logs based on a specified retention period, freeing up disk space on the /opt/panlogs partition without manually deleting important log data. This is the safest and most controlled method, as it respects the firewall's log management policies and ensures compliance with data retention requirements.
What should I do if I get this PCNSE question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Are there clue words in this question I should notice?
Yes — watch for: "first". Order matters here. You are being tested on which action comes before the others — not which action is generally useful.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This PCNSE practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSE exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.