NETSEC-ANALYST · Question #195
Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?
The correct answer is C. It defines the certificate to send to the client's browser from the management interface. SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the…
Question
Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?
Exhibit
Options
- AIt defines the SSL/TLS encryption strength used to protect the management interface.
- BIt defines the CA certificate used to verify the client's browser.
- CIt defines the certificate to send to the client's browser from the management interface.
- DIt defines the firewall's global SSL/TLS timeout values.
How the community answered
(29 responses)- A3% (1)
- B10% (3)
- C69% (20)
- D17% (5)
Explanation
SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the cipher suites that are available for securing communication with the client systems requesting the services. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device- certificate-management-ssltls-service-profile
Topics
Community Discussion
No community discussion yet for this question.
