Palo Alto Networks System Engineer – Strata — Question 31

Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

Answer options

• A. Include all traffic types in decryption policy
• B. Inability to access websites
• C. Exclude certain types of traffic in decryption policy
• D. Deploy decryption setting all at one time
• E. Ensure throughput is not an issue

Correct answer: B, C, E

Explanation

The correct answers, B, C, and E, highlight the importance of ensuring that website access is maintained, certain traffic types may need to be excluded for compliance or performance reasons, and confirming that throughput isn't compromised. Options A and D are not advisable as including all traffic types and deploying all settings at once could lead to accessibility issues and could overwhelm the system.