Palo Alto Networks PSE-Strata Exam - Topic 4 Question 117 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 117
Topic #: 4

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

ADecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

BEliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

CProvides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

DDecryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Show Suggested Answer

Suggested Answer: A, D

by Julian at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Armanda

3 days ago

B is a game changer for reducing devices!

upvoted 0 times

...

Lorean

9 days ago

Wait, can it really decrypt traffic multiple times? Sounds off.

upvoted 0 times

...

Ruthann

14 days ago

Totally agree with A, makes sense.

upvoted 0 times

...

Thomasena

19 days ago

A and B are correct!

upvoted 0 times

...

Fallon

24 days ago

A and B are the way to go. Offloading SSL decryption is the real deal.

upvoted 0 times

...

Artie

29 days ago

Haha, C is a joke. Increasing third-party devices? No thanks, I'll take A and B.

upvoted 0 times

...

Patria

2 months ago

D is just silly. Who would want to decrypt traffic multiple times? Clearly A and B.

upvoted 0 times

...

Rory

2 months ago

A and B make the most sense. Reducing third-party devices is always a plus.

upvoted 0 times

...

Rusty

2 months ago

A and B are the correct answers. Decryption broker is a game-changer!

upvoted 0 times

...

Kenneth

2 months ago

I'm a bit confused about option D; I thought the point was to decrypt traffic only once to improve efficiency.

upvoted 0 times

...

Silva

2 months ago

I feel like there was a question similar to this in our practice exam, and it emphasized offloading decryption to the NGFW.

upvoted 0 times

...

Ressie

3 months ago

I remember studying that it reduces the number of third-party devices, so I think option B might be correct.

upvoted 0 times

...

Herman

3 months ago

I think the decryption broker is supposed to simplify SSL decryption, but I'm not sure if it decrypts traffic just once or multiple times.

upvoted 0 times

...

Gladys

3 months ago

I think I've got it! A and B describe the key benefits of the decryption broker, so those are the two correct answers.

upvoted 0 times

...

Monroe

3 months ago

I'm not totally sure about this one. I'll need to review the decryption broker functionality more carefully before making a decision.

upvoted 0 times

...

Brett

3 months ago

Okay, I'm pretty sure A and B are the correct answers. The decryption broker allows you to offload SSL decryption and reduce the number of third-party devices needed.

upvoted 0 times

...

Barney

3 months ago

Hmm, I'm a bit confused about the difference between A and D. Aren't they both talking about offloading SSL decryption to the Palo Alto firewall?

upvoted 0 times

...

Jacquline

4 months ago

I think the key here is to focus on the decryption broker functionality. A and B seem to describe the benefits, while C and D are more about the number of third-party devices.

upvoted 0 times

...