Exam NetSec-Analyst Topic 1 Question 80 Discussion
Actual exam question for Palo Alto Networks's NetSec-Analyst exam
Question #: 80
Topic #: 1
Question #: 80
Topic #: 1
A financial institution must comply with a regulation that prohibits the decryption of any traffic destined for
"Banking" or "Healthcare" websites. How should the analyst implement this requirement while still decrypting other web traffic?
"Banking" or "Healthcare" websites. How should the analyst implement this requirement while still decrypting other web traffic?
Suggested Answer: B Vote an answer
Comprehensive and Detailed 150 to 250 words of Explanation From Palo Alto Networks Network Security Analyst Knowledge:
Compliance and privacy are major objectives for a Network Security Analyst. Palo Alto Networks firewalls use Decryption Policies to determine which traffic should be inspected and which should be bypassed.
By creating a specific policy rule with the action set to "No Decrypt," the analyst can use URL Categories (such as financial-services and health-and-medicine) as the matching criteria. When an internal user visits a banking site, the firewall identifies the category and allows the encrypted session to pass through untouched, maintaining the user's privacy and meeting regulatory requirements. This rule must be placed higher in the policy list than the general "Decrypt Everything" rule to ensure it takes precedence. This granular control allows the organization to eliminate security "blind spots" for most web traffic while respecting the sensitive nature of specific personal data.
Compliance and privacy are major objectives for a Network Security Analyst. Palo Alto Networks firewalls use Decryption Policies to determine which traffic should be inspected and which should be bypassed.
By creating a specific policy rule with the action set to "No Decrypt," the analyst can use URL Categories (such as financial-services and health-and-medicine) as the matching criteria. When an internal user visits a banking site, the firewall identifies the category and allows the encrypted session to pass through untouched, maintaining the user's privacy and meeting regulatory requirements. This rule must be placed higher in the policy list than the general "Decrypt Everything" rule to ensure it takes precedence. This granular control allows the organization to eliminate security "blind spots" for most web traffic while respecting the sensitive nature of specific personal data.
by Rupert at Sep 10, 2026, 07:45 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).