Palo Alto Networks Exam PCNSE Topic 7 Question 72 Discussion

Actual exam question for Palo Alto Networks's PCNSE exam

Question #: 72
Topic #: 7

An engineer is tasked with decrypting web traffic in an environment without an established PKI When using a self-signed certificate generated on the firewall which type of certificate should be in? approved web traffic?

AAn Enterprise Root CA certificate

BThe same certificate as the Forward Trust certificate

CA Public Root CA certificate

DThe same certificate as the Forward Untrust certificate

Show Suggested Answer

Suggested Answer: C

The IPv4 Source Interface service route allows the administrator to specify a source interface for a service based on the virtual system. This option overrides the inherited global service route configuration and provides more granular control over the service routes for each virtual system. Reference:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/customize-service-routes-for-a-virtual-system.html

by Lavonna at Jul 24, 2023, 06:12 PM

Limited Time Offer

25%

Off

Get Premium PCNSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

1 months ago

I think Option B is the correct answer. The self-signed certificate generated on the firewall should be the same as the Forward Trust certificate.

upvoted 0 times

Alfreda

9 days ago

I agree, the self-signed certificate should match the Forward Trust certificate.

upvoted 0 times

...

Catalina

13 days ago

I think Option B is the correct answer.

upvoted 0 times

...