nerdexam
Palo_Alto_Networks

PCNSA · Question #188

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

The correct answer is B. The traffic was denied by security profile. D. The web session was decrypted. Options B and D are correct because the log entry shows two simultaneous conditions: the SSL/TLS inspection engine successfully decrypted the web session (D), and the decrypted content was then blocked by a security profile - such as antivirus, IPS, or application control - not…

Submitted by kevin_r· Apr 18, 2026Operate

Question

Given the screenshot, what are two correct statements about the logged traffic? (Choose two.)

Exhibit

PCNSA question #188 exhibit

Options

  • AThe web session was unsuccessfully decrypted.
  • BThe traffic was denied by security profile.
  • CThe traffic was denied by URL filtering.
  • DThe web session was decrypted.

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    79% (37)
  • C
    15% (7)

Explanation

Options B and D are correct because the log entry shows two simultaneous conditions: the SSL/TLS inspection engine successfully decrypted the web session (D), and the decrypted content was then blocked by a security profile - such as antivirus, IPS, or application control - not by URL filtering alone (B). These two events are complementary: decryption must happen first so the security profile can inspect the payload.

Option A is wrong because it directly contradicts D - the session was decrypted successfully, not unsuccessfully. Option C is a common trap: URL filtering is a distinct action from a security profile block; a log showing "security profile" denial means something like AV or IPS triggered, not the URL category engine.

Memory tip: Think of the inspection pipeline in order - Decrypt → URL Filter → Security Profile. If the log says "security profile denied," the traffic made it past URL filtering but was caught downstream, and decryption had to succeed first for that inspection to even occur.

Topics

#Traffic Logs#Security Profiles#SSL Decryption#Firewall Monitoring

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice