A network security administrator wants to inspect HTTPS traffic from users as it egresses through...

Vendor: Paloalto Networks
Product: PCNSE
Update on: Aug 19, 2025
Questions: 374

Paloalto Networks PCNSE Question Answer

A network security administrator wants to inspect HTTPS traffic from users as it egresses through a firewall to the Internet/Untrust zone from trusted network zones.

The security admin wishes to ensure that if users are presented with invalid or untrusted security certificates, the user will see an untrusted certificate warning.

What is the best choice for an SSL Forward Untrust certificate?

A web server certificate signed by the organization's PKI

A self-signed certificate generated on the firewall

A subordinate Certificate Authority certificate signed by the organization's PKI

A web server certificate signed by an external Certificate Authority