10.3 Evaluate SSL Decryption Versus Performance Trade-Offs NETWORK-SECURITY-ARCHITECT Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A company is evaluating the performance impact of SSL decryption on its firewall. The firewall has a hardware crypto engine, but the security team is still seeing high latency on HTTPS traffic. Which factor is most likely contributing to the latency?

   • AThe firewall is using a weak cipher that is slow to decrypt.
   • BThe firewall's session table is full, causing packets to be dropped.
   • CThe firewall is performing deep packet inspection on the decrypted traffic.
   • DThe hardware crypto engine is not being used because the firewall is in a VM.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A network administrator is tuning SSL decryption on a PA-Series firewall. The firewall is experiencing high CPU usage and latency. The administrator has already enabled hardware crypto acceleration and disabled weak ciphers. Which additional tuning option is most likely to reduce the performance impact?

   • AAdjust the firewall's buffer size to optimize memory usage for SSL sessions.
   • BDisable the hardware crypto engine to reduce complexity.
   • CEnable SSL decryption for all traffic to ensure consistent inspection.
   • DIncrease the session timeout to keep sessions open longer.
   Reveal Solution Discussion Select an answer first