In Palo Alto Networks PAN-OS traffic logs, the action recorded for a session that is permitted by a security rule is _____.

### Why this is right The lab says to verify that the traffic log records an Allow action for the test traffic. The action tells you how the firewall handled the logged session. ### The concept A log entry can be checked against the test's expected source, destination, application, and matching VPN rule. If the action is not Allow, the firewall has not permitted that logged traffic. An Allow entry is useful evidence about policy handling, but end-to-end success still depends on routing, tunnel state, and the remote host's response. ### Terms - **Traffic log**: A record of sessions and how the firewall handled them. - **VPN**: Virtual Private Network, the protected inter-site connection. ### Remember Check the log's action together with its addresses and matching rule.