Paloalto Networks Network Security Administrator NetSec-Generalist Question # 14 Topic 2 Discussion

Tocentralize logsfromNGFWs to the Strata Logging Service, aRoot Certificate Authority (Root CA) certificateis required to ensuresecure connectivitybetween firewalls and Palo Alto Networks' cloud-basedStrata Logging Service.

Authenticates Firewall Connections– EnsuresNGFWs trust the Strata Logging Service.

Enables Encrypted Communication– Protectslog integrity and confidentiality.

Prevents Man-in-the-Middle Attacks– Ensuressecure TLS encryptionfor log transmission.

A. Device❌

Incorrect, becauseDevice Certificates are used for firewall management authentication, notlog transmission to Strata Logging Service.

B. Server❌

Incorrect, becauseServer Certificates authenticate service endpoints, butfirewalls need to trust a Root CA for secure logging connections.

D. Intermediate CA❌

Incorrect, becauseIntermediate CA certificates are used for validating certificate chains, butfirewalls must trust the Root CA for establishing secure connections.

Firewall Deployment– Ensuressecure log transmission to centralized services.

Security Policies– Preventslog tampering and unauthorized access.

VPN Configurations– EnsuresVPN logs are securely sent to the Strata Logging Service.

Threat Prevention– Ensuresfirewall logs are analyzed for security threats.

WildFire Integration– Logsmalware-related events to the cloud for analysis.

Zero Trust Architectures– Ensuressecure logging of all network events.

Why a Root Certificate is Required?Why Other Options Are Incorrect?References to Firewall Deployment and Security Features:Thus, the correct answer is:✅C. Root