Palo Alto Networks Certified Network Security Administrator (PCNSA)Palo Alto Networks Security PlatformHard
A network architect is designing a solution for a geographically dispersed organization that requires consistent security policies and centralized visibility across all its Palo Alto Networks firewalls. The solution must also support log collection and reporting for compliance purposes. Which two components of the Palo Alto Networks Security Operating Platform are essential for fulfilling these requirements?
- APanorama and Log Collector
- BApp-ID and User-ID
- CVirtual Systems and Service Routes
- DGlobalProtect and WildFire
Show answer & explanationAnswer & explanation
Correct answer: A. Panorama and Log Collector
Panorama provides centralized management for consistent security policies and overall visibility across multiple firewalls. Log Collectors are crucial for centralizing log data from all firewalls, enabling comprehensive reporting and compliance auditing.
Why the other options are wrong
- B. App-ID and User-ID are security classification technologies, not components for centralized management or log collection.
- C. Virtual Systems enable multi-tenancy on a single firewall, and Service Routes define firewall's own service access; neither addresses centralized management across multiple physical devices or log collection.
- D. GlobalProtect is for remote access, and WildFire is for threat analysis; neither provides centralized policy management or log collection.
Panorama & Log Collector
Panorama is the centralized management platform for Palo Alto Networks firewalls, while Log Collectors provide scalable, centralized storage and analysis of logs from these firewalls, together fulfilling needs for consistent policy, visibility, and compliance reporting.
- Panorama: Centralized policy, device, and software management
- Panorama: Centralized visibility and reporting dashboard
- Log Collector: Dedicated component for scalable log storage
- Log Collector: Enables centralized log analysis and compliance reporting
Memory trick: Panorama for the 'view', Log Collector for the 'details'.