Câu 163: PCNSE: Palo Alto Networks Certified Network Security Engineer

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (CAs): i. Enterprise-Trusted-CA, which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system.) ii. Enterprise-Untrusted-CA, which is verified as Forward Untrust Certificate iii. Enterprise-Intermediate-CA iv. Enterprise-Root-CA, which is verified only as Trusted Root CAAn end-user visits https://www.example-website.com/ with a server certificate Common Name (CN): www.example-website.com. The firewall does the SSLForward Proxy decryption for the website and the server certificate is not trusted by the firewall. The end-user's browser will show that the certificate for www. example-website.com was issued by which of the following?

1. A. Enterprise-Trusted-CA which is a self-signed CA
2. B. Enterprise-Root-CA which is a self-signed CA
3. C. Enterprise-Intermediate-CA which was, in turn, issued by Enterprise-Root-CA
4. D. Enterprise-Untrusted-CA which is a self-signed CA — đáp án hiện tại