10.3 Evaluate SSL Decryption Versus Performance Trade-Offs NETWORK-SECURITY-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which method is commonly used to measure the performance impact of SSL decryption on a firewall?

   • ACounting the number of SSL certificates installed on the firewall
   • BChecking the firewall's CPU temperature
   • CRunning throughput tests with and without SSL decryption enabled
   • DReviewing the firewall's log for decryption errors
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In which deployment scenario is SSL decryption typically most beneficial despite the performance overhead?

   • AA network where all traffic is already trusted and no inspection is needed
   • BA branch office with very low bandwidth and minimal security requirements
   • CA data center where traffic is predominantly encrypted and security inspection is critical
   • DA network with only unencrypted traffic
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which tuning option can improve SSL decryption performance on a firewall?

   • ADisabling weak ciphers to reduce the cryptographic processing overhead
   • BIncreasing the number of SSL certificates installed
   • CReducing the firewall's logging level to decrease CPU usage
   • DEnabling SSL decryption for all traffic to ensure maximum inspection
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which statement accurately describes the throughput impact of enabling SSL decryption on a firewall?

   • AThroughput is only affected when the traffic is destined for the firewall itself.
   • BThroughput remains the same because decryption is performed in parallel with normal packet forwarding.
   • CThroughput increases because decrypted traffic is easier to inspect.
   • DThroughput is typically reduced because the firewall must decrypt and re-encrypt each session.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When deciding whether to enable SSL decryption in a branch office, which factor is most important to consider?

   • AThe color of the firewall chassis
   • BThe available bandwidth and the firewall's processing capacity
   • CThe version of the firewall's operating system
   • DThe number of users in the branch office
   Reveal Solution Discussion Select an answer first