Exam PCNSE topic 1 question 519 discussion

It's A, A self-signed certificate generated on the firewall. Client is supposed to present a warning about untrusted certificate and that's what answer A will provide. I am surprised how many people answer wrong even for the simplest questions like this and create too much noise with their comments and create confusion. I hope there are people that really read study guides, admin guides, PAN Beacon study materials before they put comments here with so much confidence claiming something is correct 100% while it's not.

A of course

A is correct

As it needs to be the Forward Untrust Certificate it must not be signed by a trusted source, so self signed it is.

This question was on the exam.. Nov 2023

A is the only correct answer since it's supposed to be an untrusted certificate on the browser end.

The only acceptable answer is A. You don't want to pay for the certificate, you don't want it to have a chain of trust and you don't want it trusted anywhere in your network. It's an 'Untrust' certificate after all.

A is correct, if client machines and browsers do not have a self-signed certificate installed by default, then a warning will be triggered.

The browser doesn't have to trust the certificate. It's why we need to use a self-signed, which is free, easy to deploy and works well. The user should have a warning message. On this case, only A is correct. D is false because the brower will trust the cert automatically.

Answer is A, the question is about the Forward untrust certificate.

I will go with D