NETSEC-PRO practice question 7 of 15

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

Full set: 60 questions
Answer options
A: Prisma Cloud dashboard
B: Strata Cloud Manager (SCM) Correct answer
C: Strata Logging Service Correct answer
D: Service connection firewall
Correct Answer:
B. Strata Cloud Manager (SCM); C. Strata Logging Service
Explanation

Prisma Access for mobile users forwards all generated logs, including threat logs, to the Strata Logging Service. This service acts as the centralized, cloud-based repository for log storage and aggregation. The Strata Cloud Manager (SCM) is the unified management and monitoring console for Palo Alto Networks' Strata ecosystem, including Prisma Access. Administrators use the SCM interface, specifically its log viewer, to query, filter, and review the logs that are stored in the Strata Logging Service. Therefore, logs can be reviewed in both the management application (SCM) and the underlying logging platform (Strata Logging Service).

Why Incorrect

A. Prisma Cloud dashboard: This is the interface for Palo Alto Networks' Cloud Native Application Protection Platform (CNAPP), which secures cloud workloads, not for reviewing SASE/network security logs from Prisma Access.
D. Service connection firewall: This is a component that logs traffic specific to a data center connection. It is not a centralized application for reviewing all mobile user threat logs, which includes internet-bound traffic.

References

1. Palo Alto Networks Documentation, Strata Cloud Manager Administrator's Guide, "Monitor Logs" section: "Use the log viewer in Strata Cloud Manager to view and filter the logs that your managed devices and services forward to the Strata Logging Service." This confirms that Strata Cloud Manager (B) is used to review logs stored in the Strata Logging Service (C).

2. Palo Alto Networks Documentation, Strata Logging Service Getting Started, "What is the Strata Logging Service?" section: "The Strata Logging Service is a cloud-based logging infrastructure that allows you to centralize log collection from your Palo Alto Networks next-generation firewalls, Prisma Access, and other solutions..." This confirms that Prisma Access logs reside in the Strata Logging Service (C).

3. Palo Alto Networks Documentation, Prisma Access Administrator’s Guide, "Logging and Reporting in Prisma Access" section: This section details that Prisma Access integrates with the Strata Logging Service for log collection and that monitoring is performed through the designated management interface, which is Strata Cloud Manager. This establishes the direct relationship between Prisma Access, the Strata Logging Service, and Strata Cloud Manager.

Scroll to Top