How can you verify that a decryption policy is being applied to traffic?

By checking the configuration audit log

By checking the traffic logs for the 'decrypted' flag

By checking the decryption logs for entries showing the policy name and action

By checking the system logs for decryption errors

In a decryption policy rule, what does the 'service' setting typically match?

The application ID of the traffic

The encryption protocol, such as TLS 1.3

The destination port, such as 443 for HTTPS

Palo Alto NetworksCertified Network Security Analyst

Domain 2Objective 3

2.3 Create and Apply Decryption Policies NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Part of the Policy Creation and Application domain, which accounts for 30% of the NETWORK-SECURITY-ANALYST exam.

17questions here

4free pages

5concepts

30%of the exam

Questions 16–17

16foundation · easy
How can you verify that a decryption policy is being applied to traffic?
Select an answer first
17foundation · easy
In a decryption policy rule, what does the 'service' setting typically match?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NETWORK-SECURITY-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “NETWORK-SECURITY-ANALYST” is a trademark of its owner, used for identification only.

2.3 Create and Apply Decryption Policies NETWORK-SECURITY-ANALYST Practice Questions (Page 4)

Questions 16–17

How can you verify that a decryption policy is being applied to traffic?

In a decryption policy rule, what does the 'service' setting typically match?

Keep studying — Policy Creation and Application