Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 63 Topic 7 Discussion

Paloalto Networks Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 PCNSE Question # 63 Topic 7 Discussion

PCNSE Exam Topic 7 Question 63 Discussion:
Question #: 63
Topic #: 7

A firewall administrator has confirm reports of a website is not displaying as expected, and wants to ensure that decryption is not causing the issue. Which three methods can the administrator use to determine if decryption is causing the website to fail? (Choose three.)


A.

Move the policy with action decrypt to the top of the decryption policy rulebase.


B.

Temporarily disable SSL decryption for all websites to troubleshoot the issue.


C.

Create a policy-based “No Decrypt” rule in the decryption policy to exclude specific traffic from decryption.


D.

Investigate decryption logs of the specific traffic to determine reasons for failure.


E.

Disable SSL handshake logging.


Get Premium PCNSE Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.