Exam PCNSE topic 1 question 309 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 309
Topic #: 1

The administrator for a small company has recently enabled decryption on their Palo Alto Networks firewall using a self-signed root certificate. They have also created a Forward Trust and Forward Untrust certificate and set them as such.
The admin has not yet installed the root certificate onto client systems.
What effect would this have on decryption functionality?

A. Decryption will not function because self-signed root certificates are not supported
B. Decryption will function, but users will see certificate warnings for each SSL site they visit
C. Decryption will not function until the certificate is installed on client systems
D. Decryption will function, and there will be no effect to end users

Show Suggested Answer

Suggested Answer: B 🗳️

by jabautista100191 at Nov. 29, 2022, 2:28 a.m.

Comments

Submit Cancel

Nawda

4 months, 1 week ago

Selected Answer: B

B will be decrypted but will show unsecure due to certificate not in MMC cert. store

upvoted 1 times

...

DenskyDen

1 year ago

B. In order to decrypt the SSL sessions, a CA certificate is required. This certificate is used to generate certifcates for each SSL destination. By default, a self-signed certifcate is used. Because this certificate is not a “Trusted CA”, browsers and other applications will give the users a warning indicating that the identity of site they are accessing could not be verifed.

upvoted 2 times

...

jabautista100191

1 year, 1 month ago

The correct is B https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEZCA0

upvoted 3 times

...

Exam PCNSE All Questions

View all questions & answers for the PCNSE exam

Exam PCNSE topic 1 question 309 discussion

Comments

Nawda

DenskyDen

jabautista100191

SY0-701