Palo Alto EXAM Q&A 2023

Which feature can be configured to block sessions that the firewall cannot decrypt? Select one: a. Decryption profile in security policy b. Decryption profile in decryption policy c. Decryption profile in security profile d. Decryption profile in PBF - Answer- Decryption profile in decryption policy What is default setting for "Action" in a decryption policy rule? Select one: a. Any b. None c. No-decrypt d. Decrypt - Answer- c. No-decrypt Which type of Next Generation Firewall decryption inspects SSL traffic between an internal host and an external web server? Select one: - Answer- SSL Forward Proxy When SSL encrypted traffic first arrives at the Next Generation Firewall, which technology initially identifies the application as web-browsing? Select one: a. Encryption-ID b. Content-ID c. App-ID d. User-ID - Answer- c. App-ID On the Next Generation Firewall, which is the first configuration step for SSL Forward Proxy decryption? Select one: a. Forward Trust Certificate b. Signed Certificate c. Client Certificate Store d. SSL Certificate - Answer- a. Forward Trust Certificate Which type of Next Generation Firewall decryption inspects SSL traffic coming from external users to internal servers? Select one: a. SSL Inbound Inspection b. SSL Outbound Inspection c. SSL Forward Proxy