PCNSE · Question #323
On the NGFW, how can you generate and block a private key from export and thus harden your security posture and prevent rogue administrators or other bad actors from misusing keys?
The correct answer is C. 1. Select Device > Certificate Management > Certificates > Device > Certificates. To generate and block a private key from export: Certificate Management Generate the certificate. Select Block Private Key Export to generate the new certificate. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/block-private-key…
Question
On the NGFW, how can you generate and block a private key from export and thus harden your security posture and prevent rogue administrators or other bad actors from misusing keys?
Options
- A
- Select Device > Certificate Management > Certificates > Device > Certificates
- B
- Select Device > Certificates
- C
- Select Device > Certificate Management > Certificates > Device > Certificates
- D
- Select Device > Certificates
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- C89% (17)
Explanation
To generate and block a private key from export: Certificate Management Generate the certificate. Select Block Private Key Export to generate the new certificate. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/block-private-key- export/generate-a-private-key-and-block-it
Topics
Community Discussion
No community discussion yet for this question.