Palo Alto Networks Exam PCNSC Topic 4 Question 69 Discussion

Actual exam question for Palo Alto Networks's PCNSC exam

Question #: 69
Topic #: 4

A customer is adding a new site-to-site tunnel from a Palo Alto Networks NGFW to a third party with a policy based VPN peer After the initial configuration is completed and the changes are committed, phase 2 fails to establish

Which two changes may be required to fix the issue? (Choose two)

AVerity that the certificate used tor authentication is installed.

BVerify that PFS is enabled on both ends

CEnable the NAT Traversal advanced option.

DAdd proxy IDs to the iPsec tunnel configuration

Show Suggested Answer

Suggested Answer: D

by Layla at Feb 08, 2024, 01:30 PM

Limited Time Offer

25%

Off

Get Premium PCNSC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alethea

10 months ago

But wouldn't a priority of 255 ensure that the passive firewall takes over correctly in case of failover?

upvoted 0 times

...

Cristen

11 months ago

I think the priority should be higher. Maybe 90 would be a better option.

upvoted 0 times

...

Ronnie

11 months ago

I disagree. I believe the priority for the passive firewall should be 1.

upvoted 0 times

...

Alethea

12 months ago

I think the correct priority for the passive firewall is 0.

upvoted 0 times

...

Galen

12 months ago

But wouldn't a priority of 255 ensure that the passive firewall takes over correctly in case of failover?

upvoted 0 times

...

Leatha

12 months ago

I think the priority should be higher. Maybe 90 would be a better option.

upvoted 0 times

...

Simona

12 months ago

I disagree. I believe the priority for the passive firewall should be 1.

upvoted 0 times

...

Galen

1 years ago

I think the correct priority for the passive firewall is 0.

upvoted 0 times

...

Carlota

1 years ago

I'm leaning towards B. The passive firewall should have a priority of 1, just enough to take over if the active one goes down.

upvoted 0 times

Torie

1 years ago

I see your point, but I still believe D is the most appropriate choice for the passive firewall.

upvoted 0 times

...

Annice

1 years ago

No, I still think C is the best option for the passive firewall's priority.

upvoted 0 times

...

Carmen

1 years ago

I'm not so sure about that. I think B would be a safer choice for the passive firewall.

upvoted 0 times

...

Darrin

1 years ago

I agree with D. Having a priority of 255 for the passive firewall ensures that it will take over if the active one fails.

upvoted 0 times

...

Yolande

1 years ago

But the administrator assigned priority 100 to the active firewall, so I believe D would be the correct choice for the passive firewall.

upvoted 0 times

...

Dana

1 years ago

I think it should be C. Priority 90 makes more sense for the passive firewall.

upvoted 0 times

...

Adelaide

1 years ago

Haha, this reminds me of that joke about the network engineer who set the priority to 255 just to be 'extra passive'.

upvoted 0 times

...

Vincenza

1 years ago

I think the answer is C. The priority for the passive firewall should be lower than 100, but not too low, right? 90 seems like a good balance.

upvoted 0 times

...

Santos

1 years ago

Hmm, this question is tricky. The priority for the passive firewall needs to be lower than the active one, but what's the right number? I'm debating between B and C.

upvoted 0 times

...