Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 202

Which three statements accurately describe Decryption Mirror? (Choose three.)

Answer options

• A. Decryption, storage, inspection, and use of SSL traffic regulated in certain countries.
• B. You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.
• C. Decryption Mirror requires a tap interface on the firewall.
• D. Only management consent is required to use the Decryption Mirror future.
• E. Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel.

Correct answer: A, B, E

Explanation

Options A, B, and E correctly describe important aspects of Decryption Mirror, including the legal considerations and potential risks involved. Option C is incorrect because a tap interface is not a requirement for Decryption Mirror. Option D is also wrong as it simplifies the consent process, which involves more than just management approval.