PCNSE Exam Question 61

What does SSL decryption require to establish a firewall as a trusted third party and to establish trust between a client and server to secure an SSL/TLS connection?
  • PCNSE Exam Question 62

    An administrator is considering deploying WildFire globally.
    What should the administrator consider with regards to the WildFire infrastructure?
  • PCNSE Exam Question 63

    All firewalls at a company are currently forwarding logs to Palo Alto Networks log collectors. The company also wants to deploy a syslog server and forward all firewall logs to the syslog server and to the log collectors. There is a known logging peak time during the day and the security team has asked the firewall engineer to determine how many logs per second the current Palo Alto Networks log collectors are processing at that particular time.
    Which method is the most time-efficient to complete this task?
  • PCNSE Exam Question 64

    SSL Forward Proxy decryption is configured but the firewall uses Untrusted-CA to sign the website https //www important-website com certificate End-users are receiving me "security certificate is not trusted is warning Without SSL decryption the web browser shows that the website certificate is trusted and signed by a well-known certificate chain Well-Known- lntermediate and Well-Known-Root-CA.
    The network security administrator who represents the customer requires the following two behaviors when SSL Forward Proxy is enabled:
    1. End-users must not get the warning for the https://www.very-important-website.com website.
    2. End-users should get the warning for any other untrusted website
    Which approach meets the two customer requirements?
  • PCNSE Exam Question 65

    Which function does the HA4 interface provide when implementing a firewall cluster which contains firewalls configured as active-passive pairs?