A firewall administrator uses Panorama to manage a fleet of firewalls.

Basic Concept: Enabling Strata Logging Service alone can stop duplicate delivery to on-premises collectors. Duplicate logging is required when both destinations must receive logs.

Why B is Correct: The missed setting is duplicate logging under Device > Setup > Management, which keeps cloud and on-premises log forwarding active together.

Why A is Wrong: The device certificates for the Panorama log collectors were not renewed after enabling the cloud logging connection. is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.

Why C is Wrong: The Log Forwarding profile was modified to send logs only to the Strata Logging Service and no longer includes the on-premises Panorama log collectors. is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.

Why D is Wrong: The Panorama log collectors were not defined as primary destinations within the collector group configuration for the managed firewalls. is related to management or logging, but it does not provide the required Panorama operation, rule hierarchy behavior, or dual-log forwarding outcome.