View all questions & answers for the Palo Alto Next-Generation Firewall Engineer Exam Materials exam


Palo Alto Next-Generation Firewall Engineer Exam Materials-Question 69 Discussion
Comment Image Comment Image Comment Image

A security administrator is creating a new custom report to get a consolidated view of network events and needs to select a database to query for the report data. Which valid set of databases is available for the task? (Choose one answer)

  • A. Threat, URL Filtering, WildFire Submissions, GlobalProtect
  • B. Traffic, User-ID, Application Statistics, HIP Match
  • C. Data Filtering, IP-Tag, User-ID, Endpoint Security
  • D. System, Config, Authentication, Session Flow
Correct Answer: A

Brave-Dump Clients Votes

B 66.67%
A 33.33%

Comments



Brave-Dumps.com Admin 2025-12-09 15:42:22

Selected Answers: A


https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/monitoring/view-and-manage-reports/custom-reports
  • Slick 2026-09-29 09:49:42
    These databases are available for Application Statistics, Traffic, Threat, URL Filtering, and Tunnel Inspection logs
  • Slick 2026-09-29 09:49:46
    These databases are available for Application Statistics, Traffic, Threat, URL Filtering, and Tunnel Inspection logs

Anonymous User 2026-07-28 19:22:48

Selected Answers: B


A incorrect because, There is no "URL Filtering" in custom report. Custom report there is "URL" only.
B correct
C incorrect "IP-Tag" > Custom report = "Iptag"
D Don't have System, Configure, Session flow in custom report

You can check in your Palo Alto Firewall.
  • Thanakrit Sriboonruang 2026-07-28 19:27:07
    Custom report there is no Endpoint Security

berry tomatoz 2026-09-11 16:21:14

Selected Answers: B


On the Palo Alto NGFW (Monitor > Manage Custom Reports), when you build a custom report you pick a Database, and these fall into two categories:

Summary Databases - Pre-aggregated in 15-minute intervals for faster report generation. Duplicate sessions are grouped with a repeat counter, and some columns are dropped to keep it lightweight.
>Application Statistics Summary
>Traffic Summary
>Threat Summary
>URL Filtering Summary
>Tunnel Inspection Summary

Detailed Logs Databases -Itemize every single log entry with all available columns — much more granular, but slower to run, so Palo Alto recommends using these only when summary data isn't enough.
>Traffic
>Threat
>URL Filtering
>WildFire Submissions
>Data Filtering
>HIP Match (Host Information Profile — GlobalProtect endpoint posture)
>User-ID
>Tunnel Inspection
>Authentication