PCNSE Question #639: Real Exam Question with Answer & Explanation

Question

An administrator is receiving complaints about application performance degradation. After checking the ACC, the administrator observes that there is an excessive amount of SSL traffic. Which three elements should the administrator configure to address this issue? (Choose three.)

Options

• AQoS on the egress interface for the traffic flows
• BQoS on the ingress interface for the traffic flows
• CA QoS profile defining traffic classes
• DA QoS policy for each application ID
• EAn Application Override policy for the SSL traffic

Explanation

To mitigate performance degradation from excessive SSL traffic, an administrator should define traffic classes with a QoS profile, apply QoS policies to specific application IDs, and consider an Application Override policy for known SSL applications.

Common mistakes.

• A. While QoS is applied to interfaces, configuring it only on the egress interface for traffic flows is incomplete; it needs a comprehensive QoS framework including profiles and policies.
• B. While QoS is applied to interfaces, configuring it only on the ingress interface for traffic flows is incomplete; it needs a comprehensive QoS framework including profiles and policies.

Concept tested. QoS configuration and SSL performance optimization

Reference. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/qos/qos-overview

No community discussion yet for this question.