PCNSE · Question #367
Which three statements accurately describe Decryption Mirror? (Choose three.)
The correct answer is B. Decryption, storage, inspection and use of SSL traffic are regulated in certain countries D. You should consult with your corporate counsel before activating and using Decryption Mirror in a E. Use of Decryption Mirror might enable malicious users with administrative access to the firewall to. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/decryption- concepts/decryption-mirroring - the decryption, storage, inspection, and/or use of SSL traffic is governed in certain countries and - user consent might be required in order to use the decryption…
Question
Which three statements accurately describe Decryption Mirror? (Choose three.)
Options
- ADecryption Mirror requires a tap interface on the firewall
- BDecryption, storage, inspection and use of SSL traffic are regulated in certain countries
- COnly management consent is required to use the Decryption Mirror feature
- DYou should consult with your corporate counsel before activating and using Decryption Mirror in a
- EUse of Decryption Mirror might enable malicious users with administrative access to the firewall to
How the community answered
(35 responses)- A6% (2)
- B91% (32)
- C3% (1)
Explanation
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/decryption- concepts/decryption-mirroring - the decryption, storage, inspection, and/or use of SSL traffic is governed in certain countries and - user consent might be required in order to use the decryption mirror feature. - Additionally, use of this feature could enable malicious users with administrative access to the firewall to harvest usernames, passwords, social security numbers, credit card numbers, or other sensitive information submitted using an encrypted channel. - Palo Alto Networks recommends that you consult with your corporate counsel before activating and using this feature in a production environment.
Topics
Community Discussion
No community discussion yet for this question.