Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 219

Which two features require another license on the NGFW? (Choose two.)

Answer options

• A. SSL Inbound Inspection
• B. SSL Forward Proxy
• C. Decryption Mirror
• D. Decryption Broker

Correct answer: C, D

Explanation

The correct answers, C (Decryption Mirror) and D (Decryption Broker), require separate licensing due to their advanced functionalities that go beyond standard NGFW capabilities. Options A and B, SSL Inbound Inspection and SSL Forward Proxy, are typically included with the base license of the NGFW.