A firewall administrator needs to ensure all traffic across the company network is inspected. The administrator gathers data and finds the following information regarding the typical traffic in the…

The correct answer is D. SSL/TLS decryption. With over 91% of your traffic on TCP/443, virtually all of your users’ web sessions are encrypted HTTPS. Without decrypting that traffic, your firewall (or proxy) can’t perform deep inspection. Enabling SSL/TLS decryption (often via a transparent proxy or decryption appliance)…

Submitted by mike_84· Mar 6, 2026Security Engineering

Question

A firewall administrator needs to ensure all traffic across the company network is inspected. The administrator gathers data and finds the following information regarding the typical traffic in the network:

Which of the following is the best solution to ensure the administrator can complete the assigned task?

Exhibits

Options

AA full-tunnel VPN
BWeb content filtering
CAn endpoint DLP solution
DSSL/TLS decryption

How the community answered

(30 responses)

A
13% (4)
B
3% (1)
C
3% (1)
D
80% (24)

Explanation

With over 91% of your traffic on TCP/443, virtually all of your users’ web sessions are encrypted HTTPS. Without decrypting that traffic, your firewall (or proxy) can’t perform deep inspection. Enabling SSL/TLS decryption (often via a transparent proxy or decryption appliance) lets you terminate and re-encrypt sessions so you can apply your security policies, ensuring that the bulk of your network traffic is fully inspected.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice