Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 481

When you troubleshoot an SSL Decryption issue, which PAN-OS CLI command do you use to check the details of the Forward Trust certificate, Forward Untrust certificate, and SSL Inbound Inspection certificate?

Answer options

• A. show system setting ssl-decrypt certs
• B. show system setting ssl-decrypt certificate
• C. debug dataplane show ssl-decrypt ssl-stats
• D. show system setting ssl-decrypt certificate-cache

Correct answer: B

Explanation

The correct command is 'show system setting ssl-decrypt certificate', as it specifically provides details about the certificates used for SSL Decryption. The other options do not return the comprehensive certificate details needed for troubleshooting, with some focusing on different aspects of SSL decryption or statistics.