Question I am not sure about the good for it

[nedriano]

Hi everyone 

I am seding to take my PCNSA soon followed with PCNSE 

In my study i came a cross question for Tap interface

Who two actions can be done with a tap interface? (Choosetwo.)

• encrypt traffic
• decrypt traffic
• allow or block traffic
• log traffic A Tap interface monitors traffic is connected
  to a network switch's MIRROR/SPAN port. This mirrored traffic is forwarded by a
  switch port to a firewall's Tap interface and is analyzed for
  app-ID, User-ID, content-ID, and traffic, just other other any normal any normal any normal data will pass pass pass over the firewall. Before traffic
  can be logged, a security security mustbe configured that includes the Tap zone- So i know Tap interface can log the traffic from The Switches and Also know Tap traffic is not managed so it willn't be block or sol any that will leave leave 2 choices encryptand and traffics, i don't think the tap encrypt edin any traffic is it it traffic for app-ID, User-ID, Content-ID - that's leave with me with decrypt i's decryption role (but is is then to to managed as security role ) since Tap interface must must must-security with security with the bement tap zone
• Is the Correct for this this question is decrypting traffic and log traffic 
• Please help me and share why bc i will like to understand more just get the correct answer 

[j_snow]

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/networking/configure-interfaces/tap-interf...