Palo_Alto_NetworksPalo_Alto_Networks
PCNSE · Question #598
PCNSE Question #598: Real Exam Question with Answer & Explanation
Sign in or unlock PCNSE to reveal the answer and full explanation for question #598. The question stem and answer options stay visible for context.
Submitted by carlos_mx· Apr 18, 2026Deploy and Configure
Question
A Firewall Engineer is migrating a legacy firewall to a Palo Alto Networks firewall in order to use features like App-ID and SSL decryption. Which order of steps is best to complete this migration?
Options
- AFirst migrate SSH rules to App-ID; then implement SSL decryption.
- BConfigure SSL decryption without migrating port-based security rules to App-ID rules.
- CFirst implement SSL decryption; then migrate port-based rules to App-ID rules.
- DFirst migrate port-based rules to App-ID rules; then implement SSL decryption.
Unlock PCNSE to see the answer
You've previewed enough free PCNSE questions. Unlock PCNSE for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Firewall migration#App-ID deployment#SSL decryption deployment#Security policy configuration