Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Decryption logs provide comprehensive information about individual sessions that match a decryption policy rule.” “Monitor decryption logs to gain context about decrypted or undecrypted network traffic and diagnose and resolve decryption issues.”
Well certainly you want to check if your SSL traffic is being decrypted, so you would look onto traffic logs and apply the "Is decrypted" column. You usually check on Decryption logs when you know that decryption could be causing an issue (so besides the flag is Decrypted marks yes or no, you would see a session end reason: "decrypt-error" in the same traffic log). Based on daily workload I'd go with A.
When SSL decryption is configured and SSL sessions are being decrypted, the Decryption log is where the administrator can verify the details of the decrypted sessions. This log provides information about the SSL decryption process, including whether the decryption was successful, if there were any issues, and the details of the decrypted traffic.