Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Only A and D are the correct answers. Please check the GUI for yourself.
There are three tabs under decryption profile under device groups > objects. SSL decryption, No decryption and SSH proxy. Under No decryption "Block sessions with expired certificates" and "Block sessions with untrusted issuers".
A, C and D are correct. Check on the FW itself under decryption profile.