Examice

Exam PSE Strata All QuestionsBrowse all questions from this exam

Question 7

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Correct Answer: A, B

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once. This eliminates the need for a third party SSL decryption option, reducing the total number of third party devices performing analysis and enforcement.

Discussion

scanossaOptions: AB

A & B https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-broker#:~:text=Decryption%20broker%20allows%20you%20to,party%20appliances)%20for%20additional%20enforcement.

freepotatoesOptions: AB

AB is correct

fatehzOptions: AB

C is wrong because it's not a third party and D is wrong because it's done to avoid decryption multiple time

yet_another_user

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-broker