Palo Alto Networks Certified Network Security Engineer (PCNSE) — Question 92

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

Answer options

• A. The firewall is in multi-vsys mode.
• B. The traffic is offloaded.
• C. The traffic does not match the packet capture filter.
• D. The firewall's DP CPU is higher than 50%.

Correct answer: B, C

Explanation

The correct answers are B and C because offloaded traffic does not pass through the firewall for inspection, and traffic that does not meet the capture filter criteria will not be recorded. Options A and D do not prevent traffic capture; they pertain to the operational mode and CPU usage of the firewall, which do not inherently block traffic capture.