Which two statements correctly describe what a Network Packet Broker does for a Palo Alto Networks NGFW? (Choose two.)
Which two statements correctly describe what a Network Packet Broker does for a Palo Alto Networks NGFW? (Choose two.)
A Network Packet Broker for a Palo Alto Networks NGFW performs two key functions. It allows SSL decryption to be offloaded to the NGFW, enabling traffic to be decrypted only once, thereby optimizing the decryption process. Additionally, it eliminates the need for third-party SSL decryption options, reducing reliance on additional third-party devices for decryption. These functions enhance the efficiency and simplicity of network security management.
B and C are correct, Network Packet Broker feature replaces Decryption Broker, it means has the same characteristics part of the NGFW.
This one is tricky, I think that A is referring to the use of third-party decryption broker, but with using NGFW as packet broker, you don't need third-party device to preform decryption and hence the C option is more appropriate.
Please refer to: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/network-packet-broker/network-packet-broker-overview
From a sales perspective, BC are more appropriate than AB. We are selling the Palo consolidation story - fewer 3rd party devices, just use Palo for everything. So this being a pre-sales exam, I vote BC.