Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 208

What are three reasons for excluding a site from SSL decryption? (Choose three.)

Answer options

• A. the website is not present in English
• B. unsupported ciphers
• C. certificate pinning
• D. unsupported browser version
• E. mutual authentication

Correct answer: B, C, E

Explanation

The correct reasons for excluding a site from SSL decryption are B (unsupported ciphers), C (certificate pinning), and E (mutual authentication). Unsupported ciphers prevent decryption due to incompatibility, certificate pinning ensures that only specific certificates can be used, and mutual authentication requires both parties to authenticate, complicating decryption. Options A and D are not valid reasons for exclusion in this context.