When SSL traffic passes through the firewall, which component is evaluated first?

This question above has multiple choices as follows;

a. Decryption exclusions list

b. Security policy

c. Decryption policy

d. Decryption Profile

The correct answer is b. Security policy.

All traffic that extends across the dataplane of Palo Alto Networks firewall is matched against a security policy. On the firewall, security policies can be defined using different criteria like, IP addresses, ports, applications, and users.