Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

The correct answer is B. Configure on SSL/TLS Profile. SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the…

Core Firewall Concepts and Administration

Question

Options

ASet Up SSL/TLS under Policies > Service/URL Category > Service.
BConfigure on SSL/TLS Profile.
CConfigure a Decryption Profile and select SSL/TLS services.
DSet up Security policy rule to allow SSL communication.

How the community answered

(35 responses)

A
3% (1)
B
91% (32)
D
6% (2)

Explanation

SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the cipher suites that are available for securing communication with the client systems requesting the services. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/device/device- certificate-management-ssltls-service-profile.html

Topics

#SSL/TLS Profile#certificate management#Panorama#managed device communication

Community Discussion

No community discussion yet for this question.

Full PCNSC Practice