What are three valid qualifiers for a Decryption Policy Rule match? (Choose three )

The correct answer is A. Destination Zone C. Custom URL Category D. User-ID. Source interface and App ID option is not present into Decryption policy rule. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/define-traffic-to- decrypt/create-a-decryption-policy-rule

Submitted by helene.fr· Apr 18, 2026Deploy and Configure

Question

Options

ADestination Zone
BApp-ID
CCustom URL Category
DUser-ID
ESource Interface

How the community answered

(39 responses)

A
92% (36)
B
3% (1)
E
5% (2)

Explanation

Source interface and App ID option is not present into Decryption policy rule. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/define-traffic-to- decrypt/create-a-decryption-policy-rule

Topics

#Decryption Policy#Security Policy Rules#Palo Alto Firewall#Policy Match Conditions

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice