Discuss Palo Alto Networks PSE-Strata Exam Topic 2 Question 125

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

ADecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

BEliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

CProvides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

DDecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Suggested Answer: A, D

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Jaleesa 20 days ago

Same here, it’s tricky!

Lorrie 25 days ago

I just hope I remember this on the exam!

Annamae 1 month ago

True, clarity is key in these questions.

Jaleesa 1 month ago

But C could confuse some people.

Lorrie 1 month ago

Yeah, less hardware is always better.

Annamae 2 months ago

B really simplifies the setup.

Jaleesa 2 months ago

I agree with A, but I feel C is misleading.

Lorrie 2 months ago

A makes sense, but B seems off.

Annamae 2 months ago

I think A and B are correct.

Frederick 2 months ago

B is definitely right, but A seems a bit misleading.

Frederic 2 months ago

I thought it was just for offloading, not reducing devices.

Merilyn 3 months ago

Wait, does it really decrypt traffic multiple times? Sounds off.

Ria 3 months ago

Totally agree with that!

Royce 3 months ago

A and B are correct!

Alease 3 months ago

I feel like option B is definitely correct since it talks about reducing third-party devices, but I’m not completely confident about the second choice.

Art 3 months ago

I’m a bit confused about option D. Does it really allow for multiple decryptions? I thought the point was to streamline the process.

Gabriele 3 months ago

I remember practicing a question similar to this, and I think option A sounds right because it mentions decrypting traffic only once, which is efficient.

Brandon 4 months ago

I think the decryption broker is supposed to simplify SSL decryption, but I'm not sure if it really eliminates the need for third-party devices.

Palo Alto Networks PSE-Strata Exam - Topic 2 Question 125 Discussion