Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 342

An administrator is assisting a security engineering team with a decryption rollout for inbound and forward proxy traffic. Incorrect firewall sizing is preventing the team from decrypting all of the traffic they want to decrypt.

Which three items should be prioritized for decryption? (Choose three.)

Answer options

• A. Financial, health, and government traffic categories
• B. Less-trusted internal IP subnets
• C. Known malicious IP space
• D. High-risk traffic categories
• E. Public-facing servers

Correct answer: B

Explanation

Prioritizing less-trusted internal IP subnets is vital because these networks may harbor potential threats that could compromise security. The other options, while important, do not pose the same level of immediate risk to internal systems as less-trusted subnets. Financial, health, and government traffic, along with high-risk categories, are also critical but should follow the need to secure less-trusted sources first.