Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 410

An engineer configures SSL decryption in order to have more visibility to the internal users’ traffic when it is egressing the firewall.

Which three types of interfaces support SSL Forward Proxy? (Choose three.)

Answer options

• A. High availability (HA)
• B. Layer 3
• C. Layer 2
• D. Tap
• E. Virtual Wire

Correct answer: B, C, E

Explanation

The correct interfaces for SSL Forward Proxy are Layer 3, Layer 2, and Virtual Wire because these types support the necessary routing and handling of SSL traffic. High availability (HA) and Tap interfaces do not provide the capability required for SSL decryption since they focus on redundancy and monitoring rather than traffic manipulation.