PCNSA Decryption and Monitoring Practice Question
Which TWO of the following are types of decryption supported by Palo Alto Networks firewalls? (Choose two.)
⚠ Common exam trap
Test-takers frequently confuse 'SSL Reverse Proxy' with 'SSL Inbound Inspection' or think 'TLS 1.3 Decryption' is a separate feature, when Palo Alto Networks only defines two decryption types: SSL Forward Proxy and SSL Inbound Inspection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SSL Forward Proxy
SSL Forward Proxy is correct because it allows the firewall to decrypt outbound SSL/TLS traffic from internal clients to external servers, enabling inspection of encrypted content for threats and data filtering. This is a core decryption feature in Palo Alto Networks firewalls, distinct from inbound inspection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SSH Proxy
Why it's wrong here
SSH Proxy is a separate feature, not decryption.
- ✓
SSL Forward Proxy
Why this is correct
Used for outbound decryption.
- ✓
SSL Inbound Inspection
Why this is correct
Used for inbound decryption.
- ✗
TLS 1.3 Decryption
Why it's wrong here
TLS 1.3 is supported but not a type of decryption.
- ✗
SSL Reverse Proxy
Why it's wrong here
Not a standard decryption type; term is SSL Inbound Inspection.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 516 original PCNSA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNSA practice question is part of Courseiva's free Palo Alto Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNSA exam.