Free PAN-NGFE Web TestEngine Demo

Q6 Single choice

Which configuration step is required when implementing a new self-signed root certificate authority (CA) certificate for SSL decryption on a Palo Alto Networks firewall?

A
Import the new subordinate CA certificate into the trust stores of all client devices.
B
Set the subordinate CA certificate as the default routing certificate for all network traffic.
C
Configure the subordinate CA to issue certificates with indefinite validity periods.
D
Disable all existing SSL decryption rules until the new certificate is fully propagated.

PAN-NGFE Web TestEngine demo