Which certificate is the best choice to configure as an SSL Forward Trust certificate?

A network security administrator wants to begin inspecting bulk user HTTPS traffic flows egressing out of the internet edge firewall.

Which certificate is the best choice to configure as an SSL Forward Trust certificate?
A . A self-signed Certificate Authority certificate generated by the firewall
B. A Machine Certificate for the firewall signed by the organization’s PKI
C. A web server certificate signed by the organization’s PKI
D. A subordinate Certificate Authority certificate signed by the organization’s PKI

View Answer

Answer: D

Explanation:

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/decryption/configure-ssl-forward-proxy