10.8 Evaluate SSL Inspection Sizing Requirements NETWORK-SECURITY-ARCHITECT Practice Questions (Page 4)

Questions 16–17

1. 16application · medium

   A company is choosing between two PA-Series models for a data center deployment. Model A has a higher raw firewall throughput but lower SSL decryption throughput than Model B. The company's traffic is predominantly HTTPS with a high session rate. Which model should they choose and why?

   • AModel A, because higher raw firewall throughput ensures better performance for all traffic types, including SSL.
   • BModel A, because raw firewall throughput is the most important factor for overall network performance.
   • CModel B, because it has a higher session rate, which is more important than throughput for HTTPS traffic.
   • DModel B, because SSL decryption throughput is the limiting factor for HTTPS-heavy traffic, and Model B can handle the required decryption load.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When estimating SSL inspection sizing requirements, which traffic characteristic is most important to consider for determining the required decryption throughput?

   • AAverage SSL session duration
   • BTotal bytes per second of SSL traffic
   • CTotal number of unique SSL certificates
   • DNumber of SSL clients
   Reveal Solution Discussion Select an answer first