問題文
A retail company decrypts outbound web traffic. The analyst is asked to explain what the decryption profile adds on top of the decryption policy rule that already selects the traffic. What is the role of the decryption profile?
選択肢
- It decides which security profiles are applied to the decrypted traffic so that the inspection settings live on the profile and the rule only selects the traffic.
- It selects which sessions are decrypted, based on source, destination, user, and URL category so that the rule that carries it only has to name the zones and leave the rest of the selection to the profile.
- It defines the checks applied to the session once it has been selected, such as how to treat an expired or untrusted server certificate and which protocol versions are acceptable.
- It stores the certificate and private key that the firewall presents to the client, so that a separate certificate object is not required for the deployment to work in either direction.