Palo_Alto_Networks
PSE-PLATFORM · Question #356
PSE-PLATFORM Question #356: Real Exam Question with Answer & Explanation
Sign in or unlock PSE-PLATFORM to reveal the answer and full explanation for question #356. The question stem and answer options stay visible for context.
Question
Which two actions would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL Forward Proxy? (Choose two.)
Options
- ACreate a no-decrypt Decryption Policy rule.
- BConfigure an EDL to pull IP addresses of known sites resolved from a CRL.
- CCreate a Dynamic Address Group for untrusted sites
- DCreate a Security Policy rule with vulnerability Security Profile attached.
- EEnable the "Block sessions with untrusted issuers" setting.
Unlock PSE-PLATFORM to see the answer
You've previewed enough free PSE-PLATFORM questions. Unlock PSE-PLATFORM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.