Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 75

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

Answer options

• A. Configure a Decryption Profile and select SSL/TLS services.
• B. Set up SSL/TLS under Policies > Service/URL Category > Service.
• C. Set up Security policy rule to allow SSL communication.
• D. Configure an SSL/TLS Profile.

Correct answer: D

Explanation

The correct answer is D, as configuring an SSL/TLS Profile directly defines the certificate and protocol for SSL/TLS services. Options A and B address related configurations but do not specifically define the SSL/TLS profile. Option C focuses on allowing communication rather than configuring the necessary settings.