Newly Released Paloalto Networks PSE-Strata Exam PDF

Page: 4 / 4

Question 16

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Options:

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Question 17

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

Options:

allow the request and all subsequent responses

temporarily disable the DNS Security function

block the query

discard the request and all subsequent responses

Question 18

Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?