Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 200

What are three valid qualifiers for a Decryption Policy Rule match? (Choose three.)

Answer options

• A. App-ID
• B. Custom URL Category
• C. User-ID
• D. Destination Zone
• E. Source Interface

Correct answer: B, C, D

Explanation

The correct qualifiers for a Decryption Policy Rule match include Custom URL Category, User-ID, and Destination Zone, as they help define specific parameters for decryption actions. App-ID and Source Interface do not meet the criteria necessary for this policy rule, making them incorrect choices.