Palo_Alto_NetworksPalo_Alto_Networks
PCNSE · Question #595
PCNSE Question #595: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSE to reveal the answer and full explanation for question #595. The question stem and answer options stay visible for context.
Submitted by tom_us· Apr 18, 2026Deploy and Configure
Question
A network security administrator wants to begin inspecting bulk user HTTPS traffic flows egressing out of the internet edge firewall. Which certificate is the best choice to configure as an SSL Forward Trust certificate?
Options
- AA self-signed Certificate Authority certificate generated by the firewall
- BA Machine Certificate for the firewall signed by the organization's PKI
- CA web server certificate signed by the organization's PKI
- DA subordinate Certificate Authority certificate signed by the organization's PKI
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#SSL Decryption#SSL Forward Proxy#Certificates#Firewall Configuration