Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
You can have a working Decryption Policy WITHOUT choosing a Decryption Profile. This is optional. A is incorrect.
don't need Forward Trust or Untrust Certificate on SSl inbound inspection
it says any traffic "without mentioning ssl forward proxy or inbound inspection" so if one of the answers are correct either for forward proxy or inbound inspection then that's the right answer. in any case decryption profile is not necessary because there is already default-profile.