Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Get Unlimited Access

Palo-Alto-Networks Discussions

Exam PSE-SASE topic 1 question 25 discussion

Actual exam question from Palo Alto Networks's PSE-SASE

Question #: 25
Topic #: 1

[All PSE-SASE Questions]

Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.
Which proxy should be used to decrypt this traffic?

A. SCP Proxy
B. SSL Inbound Proxy
C. SSH Forward Proxy
D. SSL Forward Proxy

Show Suggested Answer

Suggested Answer: B 🗳️

by Normio at Feb. 10, 2023, 11:14 a.m.

Comments

Submit Cancel

Normio

Highly Voted 1 year, 3 months ago

SSL Inbound Proxy ecryption mode can only work if you have control on the targeted Web Server certificate to be allow to import Key Pair on Palo Alto Networks Device. That's why this decryption mode is often use to decrypt SSL inbound traffic to Internal Web Server. Since in the question they talk about IN THE DATA CENTER, it needs to be this one. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV8CAK

upvoted 5 times

...

sov4

Most Recent 2 weeks ago

Selected Answer: D

D. SSL Forward Proxy. SSL inbound proxy isnt a thing... it's SSL inbound inspection.

upvoted 1 times

...

JohnPalo

2 months, 2 weeks ago

Selected Answer: D

Since it's referring to internal users and SC-CAN do not enforce security, it would be SSL outbound proxy, that hits the users connecting from remote networks or as Mobile Users.

upvoted 1 times

...

Pretorian

1 year, 2 months ago

Selected Answer: B

Choosing "B" although SSL Inbound INSPECTION is not a proxy.

upvoted 3 times

...