QUESTION: 209

Which three statements accurately describe Decryption Mirror? (Choose three.)

Decryption, storage, inspection, and use of SSL traffic regulated in certain countries.
You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.
Decryption Mirror requires a tap interface on the firewall.
Only management consent is required to use the Decryption Mirror future.
Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel.

Answer(s): A,B,E

Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-concepts/decryption-mirroring

Reveal Solution Next Question

QUESTION: 210

As a best practice, which URL category should you target first for SSL decryption?

Health and Medicine
High Risk
Online Storage and Backup
Financial Services

Answer(s): B

Reference:

https://docs.paloaltonetworks.com/best-practices/8-1/decryption-best-practices/decryption-best-practices/deploy-ssl-decryption-using-best-practices.html

Reveal Solution Next Question

QUESTION: 211

Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

LDAP Server Profile configuration
GlobalProtect
Windows-based User-ID agent
PAN-OS integrated User-ID agent

Answer(s): B

Reveal Solution Next Question

DRAG DROP (Drag and Drop is not supported)
Below are the steps in the workflow for creating a Best Practice Assessment in a firewall and Panorama configuration. Place the steps in order.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

Free PCNSE Exam Braindumps (page: 54)

QUESTION: 209

Reference:

QUESTION: 210

Reference:

QUESTION: 211

QUESTION: 212

Explanation:

PCNSE Exam Discussions & Posts