Free PCNSE Exam braindumps download (PCNSE exam dumps Free)

QUESTION: 311

During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted.

How should the engineer proceed?

Create a Security policy to allow access to those sites
Install the unsupported cipher into the firewall to allow the sites to be decrypted
Add the sites to the SSL Decryption Exclusion list to exempt them from decryption
Allow the firewall to block the sites to improve the security posture

Answer(s): C

Show Answer Next Question

QUESTION: 312

A network security engineer wants to prevent resource-consumption issues on the firewall.
Which strategy is consistent with decryption best practices to ensure consistent performance?

Use Decryption profiles to downgrade processor-intensive ciphers to ciphers that are less processor-intensive
Use Decryption profiles to drop traffic that uses processor-intensive ciphers
Use PFS in a Decryption profile for higher-priority and higher-risk traffic, and use less processor-intensive decryption methods for lower-risk traffic
Use RSA in a Decryption profile for higher-priority and higher-risk traffic, and use less processor-intensive decryption methods for lower-risk traffic

Answer(s): C

Show Answer Next Question

QUESTION: 313

With the default TCP and UDP settings on the firewall, what will be the identified application in the following session?

unknown-udp
not-applicable
insufficient-data
incomplete

Answer(s): A

Show Answer Next Question

QUESTION: 314

A remote administrator needs firewall access on an untrusted interface. Which two components are required on the firewall to configure certificate-based administrator authentication to the web UI? (Choose two.)