Examice

Exam PCNSE All QuestionsBrowse all questions from this exam

Question 402

An engineer wants to forward all decrypted traffic on a PA-850 firewall to a forensic tool with a decrypt mirror interface.

Which statement is true regarding the configuration of the Decryption Port Mirroring feature?

The engineer should install the Decryption Port Mirror license and reboot the firewall.

The PA-850 firewall does not support decrypt mirror interface, so the engineer needs to upgrade the firewall to PA-3200 series.

The engineer must assign an IP from the same subnet with the forensic tool to the decrypt mirror interface.

The engineer must assign the related virtual-router to the decrypt mirror interface.

Correct Answer: A

To configure the Decryption Port Mirroring feature on a PA-850 firewall, the engineer needs to install the Decryption Port Mirror license and reboot the firewall. This process ensures that the license takes effect and the firewall is properly configured to forward all decrypted traffic to the forensic tool.

Discussion

chrisy042Option: A

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-decryption-port-mirroring

MarshpillowzOption: A

A is correct

Frightened_AcrobatOption: A

"...you must obtain and install a Decryption Port Mirror license. The license is free..." and Step 4. "Reboot the firewall..." https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-decryption-port-mirroring

confusionOption: A

A Install the license and reboot