nerdexam
Palo_Alto_Networks

PCNSE · Question #394

What are three reasons for excluding a site from SSL decryption? (Choose three.)

The correct answer is B. unsupported ciphers C. certificate pinning E. mutual authentication. Reasons that sites break decryption technically include pinned certificates, client authentication, incomplete certificate chains, and unsupported ciphers. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption…

Submitted by jian89· Apr 18, 2026Deploy and Configure

Question

What are three reasons for excluding a site from SSL decryption? (Choose three.)

Options

  • Athe website is not present in English
  • Bunsupported ciphers
  • Ccertificate pinning
  • Dunsupported browser version
  • Emutual authentication

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    89% (31)
  • D
    9% (3)

Explanation

Reasons that sites break decryption technically include pinned certificates, client authentication, incomplete certificate chains, and unsupported ciphers. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/decryption- exclusions/exclude-a-server-from-decryption

Topics

#SSL Decryption Exclusions#Certificate Pinning#Mutual Authentication#TLS Cipher Support

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice