Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 562

An engineer must configure the Decryption Broker feature. Which Decryption Broker security chain supports bi-directional traffic flow?

Answer options

• A. Layer 2 security chain
• B. Layer 3 security chain
• C. Transparent Bridge security chain
• D. Transparent Proxy security chain

Correct answer: B

Explanation

The Layer 3 security chain is designed to handle bi-directional traffic flow, making it suitable for the Decryption Broker feature. In contrast, the Layer 2 security chain and Transparent Bridge security chain are limited to specific traffic types, while the Transparent Proxy security chain typically requires a single-direction flow.