Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 505

An organization wants to begin decrypting guest and BYOD traffic.

Which NGFW feature can be used to identify guests and BYOD users, instruct them how to download and install the CA certificate, and clearly notify them that their traffic will be decrypted?

Answer options

• A. Authentication Portal
• B. SSL Decryption profile
• C. SSL decryption policy
• D. comfort pages

Correct answer: A

Explanation

The Authentication Portal is designed specifically to help identify users and provide necessary instructions, including CA certificate installation. The SSL Decryption profile and SSL decryption policy are related to the technical aspects of decryption but do not facilitate user identification or instruction. Comfort pages are used for user notifications but do not manage the certificate installation process.