PSE-STRATA practice question 19 of 25

The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security. The firewall provides which three types of reports? (Choose three.)

Full set: 139 questions
Answer options
A: SNMP Reports
B: PDF Summary Reports Correct answer
C: Netflow Reports
D: Botnet Reports Correct answer
E: User or Group Activity Reports Correct answer
Correct Answer:
B. PDF Summary Reports; D. Botnet Reports; E. User or Group Activity Reports
Explanation

Palo Alto Networks firewalls provide a comprehensive suite of reporting capabilities. The Botnet Report is a predefined report that identifies infected hosts on the network by analyzing traffic patterns and threat intelligence. User or Group Activity Reports leverage User-ID technology to provide visibility into the applications and websites accessed by specific users or groups. While many reports can be exported as PDFs, the firewall also offers specific PDF Summary Reports, such as the Application Command Center (ACC) Risk Report, which provides a high-level overview of network risk. These reports are crucial for monitoring network security and demonstrating compliance.

Why Incorrect

A. SNMP Reports: The firewall sends SNMP data (traps and GETs) to a Network Management System (NMS), which then generates reports. The firewall itself does not generate "SNMP Reports."
C. Netflow Reports: The firewall exports NetFlow records to an external collector. The collector is the system that ingests this data and generates reports, not the firewall directly.

References

1. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide 10.2. Chapter: Monitor Network Activity, Section: View and Manage Reports. This section details the available predefined reports, including Botnet and User Activity reports.

2. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide 10.2. Chapter: Monitor Network Activity, Section: Application Command Center. This section describes the ACC, from which PDF summary reports like the ACC Risk Report can be generated.

Scroll to Top