An engineer is planning an SSL decryption implementation.
Which of the following statements is a best practice for SSL decryption?

A. Obtain an enterprise CA-signed certificate for the Forward Trust certificate.

B. Use an enterprise CA-signed certificate for the Forward Untrust certificate.

C. Use the same Forward Trust certificate on all firewalls in the network.

D. Obtain a certificate from a publicly trusted root CA for the Forward Trust certificate.








 

Suggested Answer: A

Reference:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/configure-ssl-forward-proxy

This question is in PCNSE Palo Alto Networks Certified Network Security Engineer Exam
For getting Palo Alto Networks Certified Network Security Engineer (PCNSE) Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Palo Alto Networks.
Trademarks, certification & product names are used for reference only and belong to Palo Alto Networks.
The website does not contain actual questions and answers from Palo Alto Networks's Certification Exams.