Palo Alto Networks System Engineer – Strata — Question 65

Which two statements correctly describe what a Network Packet Broker does for a Palo Alto Networks NGFW? (Choose two.)

Answer options

• A. It provides a third-party SSL decryption option, which can increase the total number of third-party devices performing analysis and enforcement.
• B. It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted only once.
• C. It eliminates the need for a third-party SSL decryption option, which reduces the total number of third-party devices performing decryption.
• D. It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted multiple times.

Correct answer: B, C

Explanation

Option B is correct because it describes how the NGFW can manage SSL decryption efficiently by decrypting traffic a single time. Option C is also correct as it indicates that a Network Packet Broker can reduce reliance on third-party SSL decryption, thus limiting the number of external devices needed. Options A and D are incorrect because they both imply an increased reliance on third-party solutions or repeated decryption, which contradicts the efficiency provided by the NGFW.