Palo_Alto_Networks
PCNSC · Question #55
PCNSC Question #55: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSC to reveal the answer and full explanation for question #55. The question stem and answer options stay visible for context.
Question
Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)
Options
- AConfigure an EDL to pull IP Addresses of known sites resolved from a CRL.
- BCreate a Security Policy rule with vulnerability Security Profile attached.
- CCreate a no-decrypt Decryption Policy rule.
- DEnable the "Block seasons with untrusted Issuers- setting.
- EConfigure a Dynamic Address Group for untrusted sites.
Unlock PCNSC to see the answer
You've previewed enough free PCNSC questions. Unlock PCNSC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.