nerdexam
Palo_Alto_Networks

PCNSA · Question #195

Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

The correct answer is C. It defines the certificate to send to the client's browser from the management interface. SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the…

Submitted by akirajp· Apr 18, 2026Device Management and Services

Question

Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

Exhibit

PCNSA question #195 exhibit

Options

  • AIt defines the SSL/TLS encryption strength used to protect the management interface.
  • BIt defines the CA certificate used to verify the client's browser.
  • CIt defines the certificate to send to the client's browser from the management interface.
  • DIt defines the firewall's global SSL/TLS timeout values.

How the community answered

(28 responses)
  • A
    4% (1)
  • C
    89% (25)
  • D
    7% (2)

Explanation

SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the cipher suites that are available for securing communication with the client systems requesting the services. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device- certificate-management-ssltls-service-profile

Topics

#SSL/TLS#Certificates#Service Profiles#Device Management

Community Discussion

No community discussion yet for this question.

Full PCNSA Practice