Explanation
Step 1. In either the NGFW or in Panorama, on the Operations/Support tab, download the technical support file.
Step 2. Log in to the Customer Support Portal (CSP) and navigate to Tools > Best Practice Assessment.
Step 3. Upload or drag and drop the technical support file.
Step 4. Map the zone type and area of the architecture to each zone.
Step 5.Follow the steps to download the BPA report bundle.
Reference:
https://www.paloaltonetworks.com/resources/videos/how-to-run-a-bpa

Explanation
The QoS profile assigns different classes and guaranteed bandwidth percentages to different applications. The QoS policy rules apply the QoS profile to the traffic based on the source and destination zones. The priority of a class is determined by its number, with lower numbers having higher priority. The bandwidth of a class is determined by its guaranteed percentage, with higher percentages having more bandwidth. Based on this information, DNS belongs to class 1 which has the highest priority (1) and the most bandwidth (40%). SSH belongs to class 4 which has the lowest priority (4) and the least bandwidth (5%). Therefore, DNS has a higher priority and more bandwidth than SSH. Similarly, Google-video belongs to class 2 which has the second highest priority (2) and the second most bandwidth (30%). WebEx belongs to class 3 which has the third highest priority (3) and the third most bandwidth (25%). Therefore, Google-video has a higher priority and more bandwidth than WebEx. References:
:https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/quality-of-service/qos-concepts/qos-profiles

Explanation
The log type that will help the engineer verify whether packet buffer protection was activated is Threat Logs.
Threat Logs are logs generated by the Palo Alto Networks firewall when it detects a malicious activity on the network. These logs contain information about the source, destination, and type of threat detected. They also contain information about the packet buffer protection that was activated in response to the detected threat.
This information can help the engineer verify that packet buffer protection was activated and determine which actions were taken in response to the detected threat.
Packet buffer protection is a feature that prevents packet buffer exhaustion by dropping packets, discarding sessions, or blocking source IP addresses when the packet buffer utilization exceeds a certain threshold. The firewall records these events in the threat log with different threat IDs and names1. The system log also records an alert event when the packet buffer congestion reaches the alert threshold2. The other types of logs do not show packet buffer protection events. References:
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/zone-protection-and-dos-protection/zone-defense/p
2:
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field

Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEiCAK