Exam PCNSE topic 1 question 183 discussion

Actual exam question from Palo Alto Networks's PCNSE

Question #: 183
Topic #: 1

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (CAs): i. Enterprise-Trusted-CA, which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system.) ii. Enterprise-Untrusted-CA, which is verified as Forward Untrust Certificate iii. Enterprise-Intermediate-CA iv. Enterprise-Root-CA, which is verified only as Trusted Root CA
An end-user visits https://www.example-website.com/ with a server certificate Common Name (CN): www.example-website.com. The firewall does the SSL
Forward Proxy decryption for the website and the server certificate is not trusted by the firewall.
The end-user's browser will show that the certificate for www. example-website.com was issued by which of the following?

A. Enterprise-Trusted-CA which is a self-signed CA
B. Enterprise-Root-CA which is a self-signed CA
C. Enterprise-Intermediate-CA which was, in turn, issued by Enterprise-Root-CA
D. Enterprise-Untrusted-CA which is a self-signed CA

Show Suggested Answer

Suggested Answer: D 🗳️

by Marcyy at Dec. 9, 2021, 11:40 p.m.

Comments

Submit Cancel

homersimpson

Highly Voted 3 years ago

Selected Answer: D

D is the answer.

upvoted 5 times

...

3 years, 1 month ago

D is correct

upvoted 4 times

...