Palo Alto Networks Exam PSE-Strata Topic 1 Question 76 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 76
Topic #: 1

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

ADecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

BEliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

CProvides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

DDecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Show Suggested Answer

Suggested Answer: B

by Ammie at Dec 27, 2023, 09:08 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brandee

16 days ago

As a security engineer, I can tell you that A and B are the correct answers. Offloading SSL decryption and cutting down on third-party devices is a no-brainer.

upvoted 0 times

...

Kerry

17 days ago

A and B are spot on. Decryption broker simplifies the setup and reduces complexity. Who needs more third-party devices anyway? That's just asking for trouble.

upvoted 0 times

...

Matt

18 days ago

Haha, D is a good one. Decrypting traffic multiple times? That's like running a marathon just to get back to the starting line. A and B are the real winners here.

upvoted 0 times

Jolanda

2 days ago

User 1: Haha, D is a good one. Decrypting traffic multiple times? That's like running a marathon just to get back to the starting line.

upvoted 0 times

...

Rex

23 days ago

Definitely A and B. Offloading SSL decryption to the NGFW and reducing third-party devices is the whole point of this feature. C just doesn't make sense.

upvoted 0 times

...

Wava

2 months ago

I'm not sure, but I think option C could also be correct because it mentions increasing the total number of third party devices for analysis and enforcement.

upvoted 0 times

...

2 months ago

I think the decryption broker provides the option to offload SSL decryption to the NGFW.

upvoted 0 times

...