PCNSE · Question #741
Which two factors should be considered when sizing a decryption firewall deployment? (Choose two.)
The correct answer is B. Encryption algorithm C. TLS protocol version. SSL/TLS decryption is computationally intensive. The encryption algorithm (Choice B) - for example, RSA key exchange vs. ECDHE, or AES-128 vs. AES-256 - directly affects CPU overhead because different algorithms have significantly different processing costs. The TLS protocol…
Question
Which two factors should be considered when sizing a decryption firewall deployment? (Choose two.)
Options
- ANumber of security zones in decryption policies
- BEncryption algorithm
- CTLS protocol version
- DNumber of blocked sessions
How the community answered
(23 responses)- A4% (1)
- B91% (21)
- D4% (1)
Explanation
SSL/TLS decryption is computationally intensive. The encryption algorithm (Choice B) - for example, RSA key exchange vs. ECDHE, or AES-128 vs. AES-256 - directly affects CPU overhead because different algorithms have significantly different processing costs. The TLS protocol version (Choice C) also matters because TLS 1.3 uses different (and generally more expensive) key exchange mechanisms than TLS 1.2, impacting throughput. Number of security zones (Choice A) and number of blocked sessions (Choice D) do not significantly influence the processing cost of performing decryption itself.
Topics
Community Discussion
No community discussion yet for this question.