PCNSE · Question #488
A network security engineer wants to prevent resource-consumption issues on the firewall. Which strategy is consistent with decryption best practices to ensure consistent performance?
The correct answer is B. Use PFS in a Decryption profile for higher-priority and higher-risk traffic, and use less processor-. If firewall resources are an issue, use stronger decryption for higher-priority traffic and use less processor-intensive decryption to decrypt and inspect lower-priority traffic until you can increase the available resources…
Question
A network security engineer wants to prevent resource-consumption issues on the firewall. Which strategy is consistent with decryption best practices to ensure consistent performance?
Options
- AUse RSA in a Decryption profile tor higher-priority and higher-risk traffic, and use less processor-
- BUse PFS in a Decryption profile for higher-priority and higher-risk traffic, and use less processor-
- CUse Decryption profiles to downgrade processor-intensive ciphers to ciphers that are less
- DUse Decryption profiles to drop traffic that uses processor-intensive ciphers
How the community answered
(15 responses)- A7% (1)
- B73% (11)
- C13% (2)
- D7% (1)
Explanation
If firewall resources are an issue, use stronger decryption for higher-priority traffic and use less processor-intensive decryption to decrypt and inspect lower-priority traffic until you can increase the available resources. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/prepare-to-deploy- decryption/size-the-decryption-firewall-deployment
Topics
Community Discussion
No community discussion yet for this question.