Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 548

Which two factors should be considered when sizing a decryption firewall deployment? (Choose two.)

Answer options

• A. Number of security zones in decryption policies
• B. Encryption algorithm
• C. TLS protocol version
• D. Number of blocked sessions

Correct answer: B, C

Explanation

The encryption algorithm (B) and the TLS protocol version (C) are critical factors because they directly influence the computational load and performance requirements of the firewall. The number of security zones (A) and blocked sessions (D) are relevant, but they do not impact the sizing of the firewall in terms of decryption capabilities.