Palo Alto Networks PSE-Strata Exam - Topic 4 Question 117 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 117
Topic #: 4

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

ADecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

BEliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

CProvides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

DDecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Show Suggested Answer

Suggested Answer: A, D

by Julian at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Patria

5 days ago

D is just silly. Who would want to decrypt traffic multiple times? Clearly A and B.

upvoted 0 times

...

Rory

10 days ago

A and B make the most sense. Reducing third-party devices is always a plus.

upvoted 0 times

...

Rusty

15 days ago

A and B are the correct answers. Decryption broker is a game-changer!

upvoted 0 times

...

Kenneth

21 days ago

I'm a bit confused about option D; I thought the point was to decrypt traffic only once to improve efficiency.

upvoted 0 times

...

Silva

26 days ago

I feel like there was a question similar to this in our practice exam, and it emphasized offloading decryption to the NGFW.

upvoted 0 times

...

Ressie

1 month ago

I remember studying that it reduces the number of third-party devices, so I think option B might be correct.

upvoted 0 times

...

Herman

1 month ago

I think the decryption broker is supposed to simplify SSL decryption, but I'm not sure if it decrypts traffic just once or multiple times.

upvoted 0 times

...

Gladys

1 month ago

I think I've got it! A and B describe the key benefits of the decryption broker, so those are the two correct answers.

upvoted 0 times

...

Monroe

2 months ago

I'm not totally sure about this one. I'll need to review the decryption broker functionality more carefully before making a decision.

upvoted 0 times

...

Brett

2 months ago

Okay, I'm pretty sure A and B are the correct answers. The decryption broker allows you to offload SSL decryption and reduce the number of third-party devices needed.

upvoted 0 times

...

Barney

2 months ago

Hmm, I'm a bit confused about the difference between A and D. Aren't they both talking about offloading SSL decryption to the Palo Alto firewall?

upvoted 0 times

...

Jacquline

2 months ago

I think the key here is to focus on the decryption broker functionality. A and B seem to describe the benefits, while C and D are more about the number of third-party devices.

upvoted 0 times

...