Which two types of logs must be forwarded to Strata Logging Service for IoT Security to function? (Choose two.)

Palo Alto Networks IoT Security relies on machine learning and deep learning to discover, classify, and secure IoT devices. To perform this analysis, the service requires specific telemetry from the firewall. Enhanced Application Logs (EALs) provide granular data about application traffic patterns, which is essential for behavioral profiling and device identification. Threat logs are necessary to detect and analyze potential attacks or malicious communications involving these devices. Forwarding these two log types to the Strata Logging Service is a mandatory prerequisite for the core functionality of IoT Security.

A. WildFire: WildFire logs are a subset of threat intelligence. The broader "Threat" log category, which includes WildFire verdicts, is the actual requirement for IoT Security.
D. URL Filtering: While URL Filtering logs are highly recommended for comprehensive visibility and policy enforcement, they are not a mandatory requirement for the fundamental device discovery and profiling functions of IoT Security.

1. Palo Alto Networks IoT Security Administrator's Guide: In the section "Integrate Your Firewall with IoT Security," under the subsection "Set Up Log Forwarding to Cortex Data Lake," the documentation explicitly states: "To enable IoT Security to discover and identify devices on your network, you must configure your firewalls to forward Threat logs and Enhanced Application Logs to Cortex Data Lake."

Source: Palo Alto Networks Technical Documentation, IoT Security Administrator's Guide.

2. Palo Alto Networks PAN-OS® Administrator's Guide: The section on "Enhanced Application Logging" describes how EALs provide "granular detail about application traffic," which is the data source IoT Security's machine learning engine uses for device profiling. This confirms why EALs are a foundational requirement.

Source: Palo Alto Networks Technical Documentation, PAN-OS Administrator's Guide, "Monitor > Logs" section.

3. Palo Alto Networks Beacon Courseware (EDU-285): The "IoT Security" module outlines the architecture and prerequisites. It specifies that the solution ingests Threat and Enhanced Application Logs from the Strata Logging Service to build a device inventory and assess risk.

Source: Palo Alto Networks, "EDU-285: Securing the Network with Cloud-Delivered Security Services," Module on IoT Security.