Learn about log types, packet buffer protection, and how to troubleshoot packet drops.
Table of Contents
Question
An administrator troubleshoots an issue that causes packet drops.
Which log type will help the engineer verify whether packet buffer protection was activated?
A. Configuration
B. Data Filtering
C. Traffic
D. Threat
Answer
C. Traffic
Explanation
In Palo Alto Networks firewalls, the Traffic logs are used to track allowed sessions. They provide information about the source and destination addresses, ports, protocols, and actions (allow or deny) for each session. If packet buffer protection is activated, it will be reflected in these logs.
Packet buffer protection is a feature that prevents the firewall’s packet buffer from being overwhelmed by a sudden influx of traffic. When the packet buffer fills up to a certain threshold, the firewall starts dropping new packets, which is logged in the Traffic logs.
Palo Alto Networks Certified Network Security Engineer PCNSE certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Palo Alto Networks Certified Network Security Engineer PCNSE exam and earn Palo Alto Networks Certified Network Security Engineer PCNSE certification.