MENU
While most Web and SaaS traffic is decrypted for inspection, you are asked to prevent a certain host on the network from SSL decryption for privacy purposes.
Suggested Answer: A
Get Premium NSK200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Creating a steering exception for the host is the appropriate action to prevent SSL decryption on specific network traffic. Steering exceptions allow you to bypass decryption for designated hosts, which is useful for privacy-sensitive scenarios.
12 comments · newest first
HI
Hillary
1 month ago
Option C makes sense too. A Do Not Decrypt policy is clear and effective.
BR
Brynn
1 month ago
I prefer option B. Real-time Protection seems more robust for blocking.
JA
Janessa
1 month ago
I think option A is the best choice. Steering exceptions are straightforward.
MA
Mabel
2 months ago
Definitely need to protect that host's privacy!
KE
Kerry
2 months ago
C sounds right for a Do Not Decrypt policy.
NG
Ngoc
2 months ago
Wait, can we really just block SSL decryption like that?
DO
Dorathy
2 months ago
I think option B is more effective.
MA
Marcelle
2 months ago
Steering exception is the way to go!
DE
Denae
2 months ago
Adding the host to the certificate-pinned application list seems like a good idea, but I’m not clear on how that affects SSL traffic overall.
PH
Phillip
3 months ago
I feel like creating a Source Network Location for a Do Not Decrypt policy could be the right approach, but I need to double-check the steps.
MA
Mari
3 months ago
I think option B sounds familiar; we practiced blocking SSL decryption in a lab, but I can't recall if it was specifically for a single host.
MA
Margret
3 months ago
I remember we discussed steering exceptions in class, but I'm not entirely sure how to implement it for just one host.