SSE-ENGINEER · Question #40
Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)
The correct answer is B. Create a do not decrypt rule for the hostname "google.com." C. The server has pinned certificates. The error messages indicate that Prisma Access is encountering certificate issues while attempting to decrypt traffic to "google.com." This suggests that the server has pinned certificates, meaning it does not allow man-in-the-middle (MITM) decryption by Prisma Access. Since…
Question
Based on the image below, which two statements describe the reason and action required to resolve the errors? (Choose two.)
Exhibit
Options
- AThe client is misconfigured.
- BCreate a do not decrypt rule for the hostname "google.com."
- CThe server has pinned certificates.
- DCreate a do not decrypt rule for the hostname "certificates.godaddy.com."
How the community answered
(54 responses)- A22% (12)
- B65% (35)
- D13% (7)
Explanation
The error messages indicate that Prisma Access is encountering certificate issues while attempting to decrypt traffic to "google.com." This suggests that the server has pinned certificates, meaning it does not allow man-in-the-middle (MITM) decryption by Prisma Access. Since pinned certificates prevent traffic decryption, a solution is to create a "do not decrypt" rule for the hostname "google.com." This will allow traffic to flow without triggering certificate errors while maintaining secure communication with Google's servers.
Topics
Community Discussion
No community discussion yet for this question.