PCNSE · Question #240
PCNSE Question #240: Real Exam Question with Answer & Explanation
The correct answer is D: Decryption Mirror interface with the associated Decryption Port Mirror license. Decryption port mirroring allows you to copy decrypted traffic from a firewall and then send it to a traffic collection tool, such as NetWitness or Solera. Decryption mirroring requires a Decryption Port Mirror license. This license is free of change and you can activate it throu
Question
An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance. Which interface type and license feature are necessary to meet the requirement?
Options
- ADecryption Mirror interface with the Threat Analysis license
- BVirtual Wire interface with the Decryption Port Export license
- CTap interface with the Decryption Port Mirror license
- DDecryption Mirror interface with the associated Decryption Port Mirror license
Explanation
Decryption port mirroring allows you to copy decrypted traffic from a firewall and then send it to a traffic collection tool, such as NetWitness or Solera. Decryption mirroring requires a Decryption Port Mirror license. This license is free of change and you can activate it through the customer https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-decryption-
Topics
Community Discussion
No community discussion yet for this question.