PCNSE Question #675: Real Exam Question with Answer & Explanation

The correct answer is B: Layer 3. PAN-OS can decrypt and inspect SSL inbound and outbound connections going through the firewall. SSL decryption can occur on interfaces in virtual wire, Layer 2 or Layer 3 mode. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmyCAC

Submitted by kavita_s· Apr 18, 2026Deploy and Configure

Question

An engineer configures SSL decryption in order to have more visibility to the internal users' traffic when it is egressing the firewall. Which three types of interfaces support SSL Forward Proxy? (Choose three.)

Options

AHigh availability (HA)
BLayer 3
CLayer 2
DTap
EVirtual Wire

Explanation

PAN-OS can decrypt and inspect SSL inbound and outbound connections going through the firewall. SSL decryption can occur on interfaces in virtual wire, Layer 2 or Layer 3 mode. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClmyCAC

Topics

#SSL Decryption#SSL Forward Proxy#Interface Modes#Firewall Configuration

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice Browse All PCNSE Questions