nerdexam
Palo_Alto_Networks

PCNSE · Question #217

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

The correct answer is D. Configure an SSL/TLS Profile. SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the…

Submitted by haruto_sh· Apr 18, 2026Deploy and Configure

Question

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

Options

  • AConfigure a Decryption Profile and select SSL/TLS services.
  • BSet up SSL/TLS under Polices > Service/URL Category>Service.
  • CSet up Security policy rule to allow SSL communication.
  • DConfigure an SSL/TLS Profile.

How the community answered

(57 responses)
  • A
    9% (5)
  • B
    2% (1)
  • C
    4% (2)
  • D
    86% (49)

Explanation

SSL/TLS service profiles specify a server certificate and a protocol version or range of versions for firewall or Panorama services that use SSL/TLS (such as administrative access to the web interface). By defining the protocol versions, the profiles enable you to restrict the cipher suites that are available for securing communication with the client systems requesting the services. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-web-interface-help/device/device- certificate-management-ssltls-service-profile.html

Topics

#SSL/TLS Profile#Panorama#Certificate Management#Protocol Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice